Re: Building a new workstation - dual or quad-core CPU for FreeBSD 7?

2007-09-17 Thread Wojciech Puchar
Yes, 4BSD is still the default, although you definitely want to use ULE for 
performance reasons (NB: only on 7, dont use ULE on 6).  I don't know whether 
the release engineers plan to change that default, but I will check.


could you point to some URL/explain what's the actual difference.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Anyone can tell anything on this crash?

2007-09-17 Thread Andrea Venturoli
As per subject; this is a 6.2p7/i386 uniprocessor box with options 
INVARIANTS,INVARIANT_SUPPORT,WITNESS,DEBUG_LOCKS,DEBUG_VFS_LOCKS,DIAGNOSTIC 
enabled and running a couple of gmirror mirrors.


 bye  Thanks
av.

# kgdb kernel.debug /var/crash/vmcore.2

kgdb: kvm_nlist(_stopped_cpus):
kgdb: kvm_nlist(_stoppcbs):
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined 
symbol ps_pglobal_lookup]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type show copying to see the conditions.
There is absolutely no warranty for GDB.  Type show warranty for details.
This GDB was configured as i386-marcel-freebsd.

Unread portion of the kernel message buffer:
panic: 0xc3be4440 is not a g_consumer
Uptime: 38d17h46m33s
Dumping 510 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 510MB (130544 pages) 494 478 462 446 430 414 398 382 366 350 334 318 
302 286 270 254 238 222 206 190 174 158 142 126 110 94 78 62 46 30 14

#0  doadump () at pcpu.h:165
165 __asm __volatile(movl %%fs:0,%0 : =r (td));
(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc04c4e60 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc04c510b in panic (fmt=0xc05f89e3 %p is not a g_consumer) at 
/usr/src/sys/kern/kern_shutdown.c:565
#3  0xc049670b in g_vfs_strategy (bo=0x0, bp=0xcd605a50) at 
/usr/src/sys/geom/geom_vfs.c:97
#4  0xc057a805 in ffs_geom_strategy (bo=0xc45ce7d8, bp=0xcd605a50) at 
/usr/src/sys/ufs/ffs/ffs_vfsops.c:1800
#5  0xc0509a7b in breadn (vp=0xc45ce6cc, blkno=224, size=16384, rablkno=0x0, 
rabsize=0x0, cnt=0, cred=0x0, bpp=0x0) at buf.h:426
#6  0xc050997c in bread (vp=0xc45ce6cc, blkno=224, size=16384, cred=0x0, 
bpp=0xd699a790) at /usr/src/sys/kern/vfs_bio.c:719
#7  0xc0579d04 in ffs_vget (mp=0xc31452e4, ino=2, flags=0, vpp=0xd699a7bc) at 
/usr/src/sys/ufs/ffs/ffs_vfsops.c:1313
#8  0xc0583169 in ufs_root (mp=0x0, flags=2, vpp=0x0, td=0xc3477300) at 
/usr/src/sys/ufs/ufs/ufs_vfsops.c:78
#9  0xc0513b77 in lookup (ndp=0xd699a8a0) at /usr/src/sys/kern/vfs_lookup.c:648
#10 0xc05131b6 in namei (ndp=0xd699a8a0) at /usr/src/sys/kern/vfs_lookup.c:211
#11 0xc051d694 in kern_statfs (td=0xc3477300, path=0x0, pathseg=UIO_USERSPACE, 
buf=0xd699aaf4) at /usr/src/sys/kern/vfs_syscalls.c:260
#12 0xc051d611 in statfs (td=0xc3477300, uap=0xd699ad04) at 
/usr/src/sys/kern/vfs_syscalls.c:242
#13 0xc05d3d6b in syscall (frame=
  {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 6, tf_esi = 134540048, 
tf_ebp = -1077941864, tf_isp = -694571676, tf_ebx = 6, tf_edx = 110, tf_ecx = 
134537216, tf_eax = 396, tf_trapno = 12, tf_err = 2, tf_eip = 671914147, tf_cs 
= 51, tf_eflags = 514, tf_esp = -1077941908, tf_ss = 59}) at 
/usr/src/sys/i386/i386/trap.c:983
#14 0xc05c2a8f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200
#15 0x0033 in ?? ()
Previous frame inner to this frame (corrupt stack?)


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: remote [ssh] Backspace] key gives me ^?

2007-09-17 Thread Jordan Gordeev

Gary Kline wrote:

On Sat, Sep 15, 2007 at 02:31:40PM -0600, Chad Perrin wrote:


On Sun, Sep 16, 2007 at 08:40:00PM +0300, Jordan Gordeev wrote:


Gary Kline wrote:


	I find that if I use Settings - Keyboard and then select 
	FreeBSD Console, I come fairly close.  Then [Backspace] 
	backs up, but the characters are not erased as I space 
	backways.  UsingTerminal, it defaults to this.


Characters are not erased for me when I hit backspace in vi. In vim, 
they are.


Yeah . . . I'm pretty sure that's normal behavior for vi/nvi.  Using
backspace, then hitting ESC to return to command mode, might cause the
backspace text to disappear.  Typing after backspacing might overwrite
the backspaced text without having to leave insert mode, too.  I'm going
on memory, here, and may be mistaken -- I didn't use nvi for very long
before going back to Vim.





There are Lots of thing I  like about vim, but after having
fouled up with the undo's and lost some critical writing or code,
I went back to what I've usedsince Bill Joy pointed me at vi.

vi only takes ONE hand, emacs takesat least 8 hands and a few
spare thumbs!!!

gary



Vim's undo can behave like vi's. Try :help undo or :help compatible.
How do you manage to use vi with only one hand? I need two :-)


--
CCD CopyWrite Chad Perrin [ http://ccd.apotheon.org ]
W. Somerset Maugham: The ability to quote is a serviceable substitute for
wit.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: flash plugin after xorg update

2007-09-17 Thread Zbigniew Komarnicki
On Monday 17 of September 2007 04:52:06 Norberto Meijome wrote:
 *(my symptoms were a bit different though, it would just time out when
 calling flash... so each flash object in a page would take 40 seconds or
 sosllooo brooowwwsssiiinnn :-) )

This same behavior I have.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Setting default keymap in kernel

2007-09-17 Thread Rommel Martinez
Is there any way to set the keyboard layout in the kernel other
than the default us.iso (qwerty) layout? I tried looking in the man
pages and the most that I got were some options. The
documentation instructed me to put these in my kernel config:

options ATKBD_DFLT_KEYMAP
makeoptions ATKBD_DFLT_KEYMAP=layout
options ATKBD_DFLT_KEYMAP=layout

I did just that. I recompiled my kernel and boot with it, but still
got the old layout qwerty layout. I tried the same with
a USB keyboard with these options:

options UKBD_DFLT_KEYMAP
makeoptions UKBD_DFLT_KEYMAP=layout
options UKBD_DFLT_KEYMAP=layout

I got the same effect.

Thanks in advance.

-- 
Rommel M. Martinez
[EMAIL PROTECTED]
GPG Key ID: 0x91C6711C
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: /dev/random question

2007-09-17 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of RW
 Sent: Sunday, September 16, 2007 1:56 PM
 To: freebsd-questions@freebsd.org
 Subject: Re: /dev/random question


 That's a poor analogy  because they haven't improved /dev/random so it
 doesn't block, they've taken a /dev/urandom implementation and renamed
 it. In terms of your analogy they've blocked off the road, diverted
 everyone onto the highway, and renamed it to main street.

 Using Yarrow for /dev/random is not an intrinsically bad idea, but it
 is controversial.

I really don't see what the issue is here.  If you really want a
/dev/urandom on your system then fine - symlink /dev/random to /dev/urandom
and be done with it.

Historically on UNIXes, /dev/urandom has been LESS random than /dev/random.
In short, it forced the application developer to make a tradeoff - if they
needed a lot of random numbers quickly, they had to be content with the
stream of numbers being less random.

Where you often saw this is in game programming - and less-random inputs
to games made them predictable, and thus, not as fun to play.  With crypto
apps, they just made those apps run -slower- as the app waited for the
random device to give it randomness.

if you really want a source that is kind of random but really isn't then
use the rand library call which doesen't use yarrow.

And as for using Yarrow for /dev/random, well the /dev/random device uses
the hardware random generator on the VIA C3 Nehemiah (stepping 3 or greater)
 CPU, not Yarrow, if such a CPU is present.  For those that think Yarrow is
controversal then fine - add in support for the hardware random generator
of your favorite processor (most have one now) and quit complaining.

Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


disklabel does not write disklabel

2007-09-17 Thread Nico -telmich- Schottelius
Hello guys!

I tried to recover my partitions, which I remeved by accident. I used
scan_ffs to create a new disklabel, which found all partitions, but when
I use disklabel with -e or -R it does not write the table down.

I think there's something I forgot or did wrong perhaps, but I'm not
getting what it is.

I put the log on
http://home.schottelius.org/~nico/unix/freebsd/bsdlabel-edit-notsave

Perhaps someone has an idea what I'm doing wrong.

Sincerly

Nico

-- 
Think about Free and Open Source Software (FOSS).
http://nico.schottelius.org/documentations/foss/the-term-foss/

PGP: BFE4 C736 ABE5 406F 8F42  F7CF B8BE F92A 9885 188C


signature.asc
Description: Digital signature


RE: /dev/random question

2007-09-17 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of RW
 Sent: Sunday, September 16, 2007 7:24 PM
 To: freebsd-questions@freebsd.org
 Subject: Re: /dev/random question


 On Sun, 16 Sep 2007 23:51:56 +0200
 Mel [EMAIL PROTECTED] wrote:

  On Sunday 16 September 2007 22:55:50 RW wrote:
   On Sun, 16 Sep 2007 15:21:38 +0200

  An applicatation using /dev/random doesn't see the difference. It was
  necessary at the time, because systems couldn't produce enough
  entropy, so they could put the application on hold till more was
  available. All the application wants is randomness and it accounts
  for the fact that it can be blocked, yet it never gets blocked so
  it's happy(tm) either way.
 
  Also, I can't see how you can usefully improve on /dev/random other
  then getting rid of the blocking, so applications don't have to
  account for it.
 
   Using Yarrow for /dev/random is not an intrinsically bad idea, but
   it is controversial.
 
  Removing /dev/random all together would be controversial. This is
  just backwards compatibility. Nothing changed as far as a consumer
  of /dev/random is concerned.

 It's not about interfaces or performance - it's about security.

 The difference is that Yarrow is a PRNG that reuses the same 160 bits
 of entropy until it reseeds itself. A traditional /dev/random will
 output fewer random bits than it get in as interrupt entropy (a good
 implementation will be conservative about this). A lot of people
 prefer the latter approach for critical things like key generation.


Understood but this was already known by the authors of the
FreeBSD /dev/random device.

If the system is running on the software generator (yarrow) the
generator is reseeded from entropy gathered from the system.  The
lan, serial, hardware and software interrupts in the system all
supply entropy.  If for some reason the PRNG cannot gather enough
entropy fast enough to reseed then the status of the sysctrl

   kern.random.sys.seeded

changes from 1 to 0 and the /dev/random device will start blocking
until entropy allows a reseed OR a process with superuser privileges
writes something to the random device which will be used for reseed.
This is documented in the man page.

Now I hear you saying Ah ha - so the FreeBSD random device does
block after all  Well, yes and no.  In most random devices under
UNIX they are very slow.  So it is easy for the system to overrun
the random device.  But Yarrow is fast enough so that the question
of blocking becomes theoretical, not practical.  I've run randomness
test programs on a number of FreeBSD systems with the Yarrow-based
driver that were doing nothing else and the device has never
blocked.  And the test program has indicated the non-randomness to
be unmeasurably small.  Now, maybe I had a slow CPU and a busy network.
But a faster CPU would just generate entropy faster.  And I would think
that someone running the fastest FreeBSD system possible would be
on a busy gigabit network, don't you?  Lots of entropy there to feed
the seed I think.


 This is just off the top of my head, but for example, say I want to
 create a data dvd that's encrypted with a unique keyfile. I may have a
 script that starts like this:

   # Create a dvd image file prefilled with random bits
   dd if=/dev/urandom of=./dvd bs=1m count=4480

   # Create a random 512-bit keyfile
   dd if=/dev/random of=./keyfile bs=64 count=1

 With FreeBSD 6.2 both files will be filled by Yarrow and it's likely
 that the end of ./dvd and the whole of ./keyfile will come from the
 same Yarrow pseudo-random sequence. If enough of the random data
 survives at the end of the dvd it may allow an attack against the PRNG.


No, it wouldn't.  The PRNG attacks are dependent on the PRNG being
bad enough that the algorithim favors certain groups of numbers
regardless of the seed being fed to it.  In this instance you would
look at the random bits at the end of the dvd that your encrypted
data hadn't overwritten, observe the clumping, and that would
vastly decrease the keyspace you would need to search on a brute
force attack on the key used to create the random sequence.  However
the Yarrow algorithim is written specifically to avoid such
clumping and as of yet no one has proven that it does clump.
Secondly, you could easily avoid the problem by after filling
the image, forcing a reseed
by writing the data you want to encrypt into the random device as
root, and it would reseed when you closed the write.

 As things stand, Yarrow is secure, but it might not be a few years from
 now.


That's true for all encryption assuming computing power continues to grow by
leaps and bounds.


Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: disklabel does not write disklabel

2007-09-17 Thread Wojciech Puchar

bsdlabel: partition c doesn't cover the whole unit!
bsdlabel: An incorrect partition c may cause problems for standard system



probably because of that.. other reason - the device is open by other 
process

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /dev/random question

2007-09-17 Thread RW
On Mon, 17 Sep 2007 03:10:30 -0700
Ted Mittelstaedt [EMAIL PROTECTED] wrote:

 
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of RW
  Sent: Sunday, September 16, 2007 7:24 PM
  To: freebsd-questions@freebsd.org
  Subject: Re: /dev/random question
 
 
  On Sun, 16 Sep 2007 23:51:56 +0200
  Mel [EMAIL PROTECTED] wrote:
 
   On Sunday 16 September 2007 22:55:50 RW wrote:
On Sun, 16 Sep 2007 15:21:38 +0200
 
   An applicatation using /dev/random doesn't see the difference. It
   was necessary at the time, because systems couldn't produce enough
   entropy, so they could put the application on hold till more was
   available. All the application wants is randomness and it accounts
   for the fact that it can be blocked, yet it never gets blocked so
   it's happy(tm) either way.
  
   Also, I can't see how you can usefully improve on /dev/random
   other then getting rid of the blocking, so applications don't
   have to account for it.
  
Using Yarrow for /dev/random is not an intrinsically bad idea,
but it is controversial.
  
   Removing /dev/random all together would be controversial. This is
   just backwards compatibility. Nothing changed as far as a consumer
   of /dev/random is concerned.
 
  It's not about interfaces or performance - it's about security.
 
  The difference is that Yarrow is a PRNG that reuses the same 160
  bits of entropy until it reseeds itself. A traditional /dev/random
  will output fewer random bits than it get in as interrupt entropy
  (a good implementation will be conservative about this). A lot of
  people prefer the latter approach for critical things like key
  generation.
 
 
 Understood but this was already known by the authors of the
 FreeBSD /dev/random device.
 
 If the system is running on the software generator (yarrow) the
 generator is reseeded from entropy gathered from the system.  The
 lan, serial, hardware and software interrupts in the system all
 supply entropy.  If for some reason the PRNG cannot gather enough
 entropy fast enough to reseed then the status of the sysctrl
 
kern.random.sys.seeded
 
 changes from 1 to 0 and the /dev/random device will start blocking
 until entropy allows a reseed OR a process with superuser privileges
 writes something to the random device which will be used for reseed.
 This is documented in the man page.

You didn't read it carefully enough (although the page isn't very
clear). Yarrow starts-off blocked; when it's accumulated a certain
amount of entropy (usually from the entropy file) it unblocks and
kern.random.sys.seeded switches from 0 to 1. It will *never* switch
back to zero of its own accord. 

What the man page is saying is that if you set
kern.random.sys.seeded=0 the device will return to the initialization
state where it waits for enough entropy to unblock again.

 Now I hear you saying Ah ha - so the FreeBSD random device does
 block after all  Well, yes and no.  In most random devices under
 UNIX they are very slow.  So it is easy for the system to overrun
 the random device.  But Yarrow is fast enough so that the question
 of blocking becomes theoretical, not practical.  I've run randomness
 test programs on a number of FreeBSD systems with the Yarrow-based
 driver that were doing nothing else and the device has never
 blocked.  

This is based on the misconception that Yarrow will block when it
runs short of entropy - it doesn't, it simply reuses it indefinitely. 

 ...
  ...
  With FreeBSD 6.2 both files will be filled by Yarrow and it's likely
  that the end of ./dvd and the whole of ./keyfile will come from the
  same Yarrow pseudo-random sequence. If enough of the random data
  survives at the end of the dvd it may allow an attack against the
  PRNG.
 
 
 No, it wouldn't.  The PRNG attacks are dependent on the PRNG being
 bad enough that the algorithim favors certain groups of numbers
 regardless of the seed being fed to it. 
 ...
  As things stand, Yarrow is secure, but it might not be a few years
  from now.
 
 
 That's true for all encryption assuming computing power continues to
 grow by leaps and bounds.

My point was that Yarrow may have weaknesses that we don't yet
understand. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /dev/random question

2007-09-17 Thread RW
On Mon, 17 Sep 2007 02:20:17 -0700
Ted Mittelstaedt [EMAIL PROTECTED] wrote:

 
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of RW
  Sent: Sunday, September 16, 2007 1:56 PM
  To: freebsd-questions@freebsd.org
  Subject: Re: /dev/random question
 
 
  That's a poor analogy  because they haven't improved /dev/random so
  it doesn't block, they've taken a /dev/urandom implementation and
  renamed it. In terms of your analogy they've blocked off the road,
  diverted everyone onto the highway, and renamed it to main street.
 
  Using Yarrow for /dev/random is not an intrinsically bad idea, but
  it is controversial.
 
 I really don't see what the issue is here.  If you really want a
 /dev/urandom on your system then fine - symlink /dev/random
 to /dev/urandom and be done with it.

My point was that Yarrow is a good choice for /dev/urandom but a
controversial choice for /dev/random, so it would have been nice to
have a choice as to whether  /dev/random uses Yarrow or a conventional
pool-based implementation.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /dev/random question

2007-09-17 Thread Wojciech Puchar


Not high-handed. Logical. The difference between /dev/random and /dev/urandom
was that /dev/random could block IO if it didn't have enough entropy


in systems where /dev/random is separate simply abusing it by cat 
/dev/random /dev/null make all other programs using it very very slow.
as unix is a multiuser system and /dev/random is readable for all - it 
wasn't very good.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /dev/random question

2007-09-17 Thread Wojciech Puchar



same Yarrow pseudo-random sequence. If enough of the random data
survives at the end of the dvd it may allow an attack against the PRNG.

As things stand, Yarrow is secure, but it might not be a few years from
now.


always humans make most of security problems, not programs.

if you need more security simply modify random generation code. even if it 
will be worse after your modification, it will be unique, and unknown to 
attackers. and that's the best protection

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to add rule with pfctl...

2007-09-17 Thread Agus
2007/9/15, Mel [EMAIL PROTECTED]:

 On Saturday 15 September 2007 23:18:17 Agus wrote:

  I am trying to figure out how to add a firewall rule with pfctl...
  This is what i'm trying to do...
 
  I've got SEC that matches certain pattern and takes the IP from that and
  want to trigger a firewall rule to block that IP
  Then after a couple of hours SEC will trigger the command to un-block
 the
  IP...
  So what i need is the command to block an IP address from command line,
 not
  touching any pf.conf

 If you don't need to add a rule but an IP, then tables are your friend.
 Example for /etc/pf.conf:
 # Placeholder for spammers table, non-routable network IP.
 table spammers persist { 192.168.111.111 }
 # Block this traffic
 block return-rst in log on $ext_if proto tcp from spammers port smtp

 Then on the command line:
 /sbin/pfctl -t spammers -Tadd ip.from.new.spammer
 And to delete:
 /sbin/pfctl -t spammers -Tdel ip.from.old.spammer

 --
 Mel
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]



Great...Thanks Mel, this was what i was looking...although not fot spammers
but for ssh brute-force attacks detected by SEC

Very nice...
See ya

PS: Question...Is there a log where i can look if pf is down, so i can check
with SEC...?

thanks
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Bash mailing list… 

2007-09-17 Thread bsd

Hello,

I would like to know if anyone of you knows a good maling list about  
bash programing (beginners).


Thx for your anwser(s).


Sincerly yours.



Gregober --- PGP ID -- 0x1BA3C2FD
bsd @at@ todoo.biz


P Please consider your environmental responsibility before printing  
this e-mail



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: flash plugin after xorg update

2007-09-17 Thread Tsu-Fan Cheng
This flash issue has made me reconsider buying a low-end laptop running
vista, so I dont have the urgency to deal with this issue. One thing I need
flash to work is that I watch mlbtv, and it requires flash plugin to
initiate. Also for some other multimedia on the internet, having flash
working just makes it so much easier... uhn

TFC

On 9/17/07, Zbigniew Komarnicki [EMAIL PROTECTED] wrote:

 On Monday 17 of September 2007 04:52:06 Norberto Meijome wrote:
  *(my symptoms were a bit different though, it would just time out when
  calling flash... so each flash object in a page would take 40 seconds or
  sosllooo brooowwwsssiiinnn :-) )

 This same behavior I have.

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: linux-firefox dies after xorg update

2007-09-17 Thread Andrew Pantyukhin
On Sun, Sep 16, 2007 at 10:40:44AM +, beni wrote:
 On Saturday 15 September 2007 19:10:02 Andrew Pantyukhin wrote:
  On Sat, Sep 15, 2007 at 02:51:08PM +, beni wrote:
   Hi,
  
   After updating xorg to 7.3 (and adding a new ServerFlags section to
   my /etc/X11/xorg.conf to put ignoreABI to on to get kdm back), now my
   linux-firefox does not start any more. It dies with the following error :
  
   [EMAIL PROTECTED] /usr/home/beni]$ linux-firefox
   /home/beni/.gtkrc-2.0:12: Unable to find include file: ~/.gtkrc.mine

Could you try moving ~/.gtkrc-2.0 somewhere else temporarily?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is there any way of turning muttrc list into an evolution or other mail alias database?

2007-09-17 Thread Andrew Pantyukhin
On Sun, Sep 16, 2007 at 09:27:03PM -0700, Gary Kline wrote:
 
 This may be a bit off the wall, but does anybody have a tool to
 take my dozens of mutt  aliases and turn them into an evolution
 -style database format?  (if not, is there any universal
 address-book app that I could use?)

A sed one-liner could probably solve the problem, but try
mail/abook - it's a nice converter.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


6.2 AMD64 Ports Problem

2007-09-17 Thread forum
I downloaded the 6.2 AMD64 disk 1 iso, installed it and updated the ports with
cvsup. However, when I try to install xorg it's looking for ports that are not 
in
the packages-6.2 folder. Instead they are in the packages-7-current or
packages-current folder. Is it safe to install from those folders?

In an attempt to get one of the updated ports I put in the /root/.profile 
PKG_PATH=ftp://ftp.freebsd.org/pub/FreeBSD/ports/amb64/packages-current; and
logged out. But when I run PKG_ADD -r dri-7.0.1,2.tbz. It tells me it could not
find the port.

Why doesn’t it pick up the PKG_PATH from the .profile?





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: can't `make index` on 4.11-STABLE

2007-09-17 Thread Sean Ellis
On Mon, Sep 10, 2007 at 07:00:35PM -0600, Kenny Dail wrote:

I have a problem trying to `make index` on a machine running 4.11-STABLE
after cvsup-ing the ports tree.
 Make sure you have cvsup'd your ports tree with the RELEASE_4_EOL tag
 Then as you are not planning on installing anything multimedia
 rm /usr/ports/multimedia/gstreamer-plugins/Makefile.common
 touch /usr/ports/multimedia/gstreamer-plugins/Makefile.common
 should allow you to make index. (worked for me anyways).

thanks Kenny,

I did what you described and was able to run the `make index` command
successfully.

Being able to continue with this machine as is, without a makeover to
freebsd 6, is ok for the role that it has. For now anyway. So far so
good,

Sean Ellis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


cron jobs not done during sleep

2007-09-17 Thread Steve Franks
Correct me if I'm wrong, but cron doesn't keep track of the last time
something was done, does it?  Which is to say if my system is crashed,
was asleep, or powered off when a job is supposed to happen, it will
not happen the next time the system is successfully operational, will
it?  It's not obvious to me for sure either way from any sources I've
read (man crontab, google), and unix tends towards k.i.s.s. (which is
why we like it)

...I understand why that would be important behavior if something
would cause problems executed other than 9am on Mondays...

Is there a tool or setting to implement this functionality?  I want
something to happen weekly, I don't care when.  Assume I am off the
commercial power grid and I'm not going to leave my system powered on
just to make sure my backups get run.  I use it when I need it, then I
turn it off.  More people should.  Electricity is not free from a
economic, social, or environmental perspective, and promises to be
less so with time.

Thanks,
Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


6.2 AMD64 Ports Problem

2007-09-17 Thread forum
I downloaded the 6.2 AMD64 disk 1 iso, installed it and updated the ports with
cvsup. However, when I try to install xorg it's looking for ports that are not 
in
the packages-6.2 folder. Instead they are in the packages-7-current or
packages-current folder. Is it safe to install from those folders?

In an attempt to get one of the updated ports I put in the /root/.profile 
PKG_PATH=ftp://ftp.freebsd.org/pub/FreeBSD/ports/amb64/packages-current; and
logged out. But when I run PKG_ADD -r dri-7.0.1,2.tbz. It tells me it could not
find the port.

Why doesn’t it pick up the PKG_PATH from the .profile?



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cron jobs not done during sleep

2007-09-17 Thread Bill Moran
In response to Steve Franks [EMAIL PROTECTED]:

 Correct me if I'm wrong, but cron doesn't keep track of the last time
 something was done, does it?  Which is to say if my system is crashed,
 was asleep, or powered off when a job is supposed to happen, it will
 not happen the next time the system is successfully operational, will
 it?  It's not obvious to me for sure either way from any sources I've
 read (man crontab, google), and unix tends towards k.i.s.s. (which is
 why we like it)
 
 ...I understand why that would be important behavior if something
 would cause problems executed other than 9am on Mondays...
 
 Is there a tool or setting to implement this functionality?  I want
 something to happen weekly, I don't care when.  Assume I am off the
 commercial power grid and I'm not going to leave my system powered on
 just to make sure my backups get run.  I use it when I need it, then I
 turn it off.  More people should.  Electricity is not free from a
 economic, social, or environmental perspective, and promises to be
 less so with time.

BSD's cron doesn't have this functionality.

The Linux folks have a cron-ish program that does recognize when jobs
have been missed and runs them at the earliest opportunity.  I dislike
it, personally, but I can see where it's convenient in some circumstances.

http://anacron.sourceforge.net/

It's in ports.

-- 
Bill Moran
http://www.potentialtech.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cron jobs not done during sleep

2007-09-17 Thread David Kelly
On Mon, Sep 17, 2007 at 08:22:45AM -0700, Steve Franks wrote:
 Correct me if I'm wrong, but cron doesn't keep track of the last time
 something was done, does it?  Which is to say if my system is crashed,
 was asleep, or powered off when a job is supposed to happen, it will
 not happen the next time the system is successfully operational, will
 it?  It's not obvious to me for sure either way from any sources I've
 read (man crontab, google), and unix tends towards k.i.s.s. (which is
 why we like it)
 
 ...I understand why that would be important behavior if something
 would cause problems executed other than 9am on Mondays...
 
 Is there a tool or setting to implement this functionality?  I want
 something to happen weekly, I don't care when.  Assume I am off the
 commercial power grid and I'm not going to leave my system powered on
 just to make sure my backups get run.  I use it when I need it, then I
 turn it off.  More people should.  Electricity is not free from a
 economic, social, or environmental perspective, and promises to be
 less so with time.

Is easy enough to implement yourself. Write a script containing your
weekly commands. Launch it every hour or so.

First thing in your script look for a flag file indicating last time
your script was run. If it does not exist, create it (suggest using
touch), and run the rest of your script.

If the flag file does exist compare dates. If older than some specified
interval then touch(1) it and run the rest of your script. Might get
fancy and code the date test in the crontab command field.

/var/run might be a good place to put your flag file.

Notice the test(1) utility can compare new/older file dates and that
touch(1) can stamp a future date on the file.

You can compile a future date with date -v +1W. Play with the
formatting options to make the output compatible with input to touch.

-- 
David Kelly N4HHE, [EMAIL PROTECTED]

Whom computers would destroy, they must first drive mad.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: flash plugin after xorg update

2007-09-17 Thread Iulian M
On Monday 17 September 2007, Tsu-Fan Cheng wrote:
 This flash issue has made me reconsider buying a low-end laptop running
 vista, so I dont have the urgency to deal with this issue. One thing I need
 flash to work is that I watch mlbtv, and it requires flash plugin to
 initiate. Also for some other multimedia on the internet, having flash
 working just makes it so much easier... uhn


You may also consider a remote machine witch runs windows and to witch you 
connect using remote desktop. 
I'm very pleased with this setup - desktop computer with no 
monitor/keyboard/mouse runs windows under the desk and i use freebsd on the 
laptop on witch windows is just another windows. The only thing i don't have 
is alt-tab on windows.  

-- 
Best Regards,
Iulian Margarintescu
http://www.erata.net
[EMAIL PROTECTED]
(spamassassin  pf  spamd all said it's OK to make it public ;-) )
Key ID: 0x03176E5CEDEFF7AB
I prefer plain text email


signature.asc
Description: This is a digitally signed message part.


Questions about passwd files

2007-09-17 Thread Tim DeBoer
Hi everyone,
I'm building a new FreeBSD 6.2-RELEASE system, and I need to move a
ton of users from the old FreeBSD 4.8-RELEASE system.

I was hoping it would be as easy as copying the master.passwd, passwd,
and group files to the new box and rebooting, but No. It's not.

Is there a way to migrate users from the old box to the new one?
I don't care so much about migrating all their home directory contents
or mail, I just want a method to add all the old users  passwords and
groups to the new machine, and create the user directories in a batch
operation.


Thanks!

-- 
Tim DeBoer
Just once, I'd like it if someone called me Sir.
Without adding You're creating a scene.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Questions about passwd files

2007-09-17 Thread Vince
Tim DeBoer wrote:
 Hi everyone,
 I'm building a new FreeBSD 6.2-RELEASE system, and I need to move a
 ton of users from the old FreeBSD 4.8-RELEASE system.
 
 I was hoping it would be as easy as copying the master.passwd, passwd,
 and group files to the new box and rebooting, but No. It's not.
 
 Is there a way to migrate users from the old box to the new one?
 I don't care so much about migrating all their home directory contents
 or mail, I just want a method to add all the old users  passwords and
 groups to the new machine, and create the user directories in a batch
 operation.
 
 
 Thanks!
 
You did run pwd_mkdb after moving the master.passwd file didnt you ?
(see pwd_mkdb(8))


Vince
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


vim undo (was Re: remote [ssh] Backspace] key gives me ^?)

2007-09-17 Thread N.J. Thomas
* Gary Kline [EMAIL PROTECTED] [2007-09-16 19:29:08 -0700]:
 There are Lots of thing I like about vim, but after having fouled up
 with the undo's and lost some critical writing or code, I went back to
 what I've usedsince Bill Joy pointed me at vi.

Presumably, you are talking about vi's (and vim's) habit of writing over
changes that have been undone.

This problem has been nullified in Vim 7 by the addition of undo
branches. You can now go back to the text after any change -- even if
they were undone.

Another nice thing is that changes are also now timestamped. You can go
backward/forwawrd in time in the buffer (e.g. :earlier 10m goes to the
text as it was ten minutes earlier).

hth,
Thomas

-- 
N.J. Thomas
[EMAIL PROTECTED]
Etiamsi occiderit me, in ipso sperabo
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: linux-firefox dies after xorg update

2007-09-17 Thread beni
On Monday 17 September 2007 02:54:23 Norberto Meijome wrote:
 On Sat, 15 Sep 2007 14:51:08 +

 beni [EMAIL PROTECTED] wrote:
  I'm running 6.2-Stable with linux-firefox 2.0.0.6.

 I'm curious... do you mind if I ask why are you using linux-firefox? if it
 is due to flash, it works just as well with native firefox.

 (and yes, i went over to 7.3 with zilch issues.)


It is basicaly for the plugins, yes. Flash, mplayer,...

-- 
Beni.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: linux-firefox dies after xorg update

2007-09-17 Thread beni
On Monday 17 September 2007 14:42:28 Andrew Pantyukhin wrote:
 On Sun, Sep 16, 2007 at 10:40:44AM +, beni wrote:
  On Saturday 15 September 2007 19:10:02 Andrew Pantyukhin wrote:
   On Sat, Sep 15, 2007 at 02:51:08PM +, beni wrote:
Hi,
   
After updating xorg to 7.3 (and adding a new ServerFlags section to
my /etc/X11/xorg.conf to put ignoreABI to on to get kdm back),
now my linux-firefox does not start any more. It dies with the
following error :
   
[EMAIL PROTECTED] /usr/home/beni]$ linux-firefox
/home/beni/.gtkrc-2.0:12: Unable to find include file:
~/.gtkrc.mine

 Could you try moving ~/.gtkrc-2.0 somewhere else temporarily?

Moved the file out of the way, but still the same result :

[EMAIL PROTECTED] /usr/home/beni]$ linux-firefox
The program 'firefox-bin' received an X Window System error.
This probably reflects a bug in the program.
The error was 'BadMatch (invalid parameter attributes)'.
  (Details: serial 102 error_code 8 request_code 145 minor_code 3)
  (Note to programmers: normally, X errors are reported asynchronously;
   that is, you will receive the error a while after causing it.
   To debug your program, run it with the --sync command line
   option to change this behavior. You can then get a meaningful
   backtrace from your debugger if you break on the gdk_x_error() function.)
[EMAIL PROTECTED] /usr/home/beni]$


-- 
Beni.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /dev/random question

2007-09-17 Thread cpghost
On Mon, 17 Sep 2007 15:50:33 +0200 (CEST)
Wojciech Puchar [EMAIL PROTECTED] wrote:

  same Yarrow pseudo-random sequence. If enough of the random data
  survives at the end of the dvd it may allow an attack against the
  PRNG.
 
  As things stand, Yarrow is secure, but it might not be a few years
  from now.
 
 always humans make most of security problems, not programs.

Yes, indeed. This, and poor key management techniques...

 if you need more security simply modify random generation code. even
 if it will be worse after your modification, it will be unique, and
 unknown to attackers. and that's the best protection

Just because it is unknown to attackers doesn't mean that it is
more secure. You can inadvertently produce *less* entropy and
randomness without even noticing it, and cryptanalysts are *very*
good at identifying this with statistical and other mathematical
methods, even without knowing the algorithm used to generate the
random stream. Security through obscurity (even for algorithms
generating random sequences) isn't the way to go if you're really
security-aware.

-- 
Cordula's Web. http://www.cordula.ws/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Clarification on updating FreeBSD through csup

2007-09-17 Thread Rakhesh Sasidharan


Hi there!

Just seeking a clarification on keeping FreeBSD up-to-date through csup. I 
am on FreeBSD 6.2 and want to keep up-to-date for security patches 
etc.


I understand I can use csup to follow the RELENG_62 branch. After the 
sources are downloaded, do I have to follow all the steps outlined in this 
(http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html) 
handbook document? I can understand building and installing world and 
kernel, but would I have to reboot to single user and do the mergemaster 
stuff too?


I *think* I might not have to do mergemaster coz security updates 
shouldn't have changes in the /etc files and so there'd be no need for 
merging files. And I *think* I might have to reboot depending on whether I 
use the stuff being affected or not ... But I'd like a clarify 
from more knowledgeable folks nevertheless. :)


Also, would the make buildworld installworld part take a long time? Or 
through the magic of make it just compiles the stuff that's getting 
updated (and stuff that requires on this)?


TIA,

- Rakhesh
http://rakhesh.net/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to add rule with pfctl...

2007-09-17 Thread Agus
2007/9/15, Mel [EMAIL PROTECTED]:

 On Saturday 15 September 2007 23:18:17 Agus wrote:

  I am trying to figure out how to add a firewall rule with pfctl...
  This is what i'm trying to do...
 
  I've got SEC that matches certain pattern and takes the IP from that and
  want to trigger a firewall rule to block that IP
  Then after a couple of hours SEC will trigger the command to un-block
 the
  IP...
  So what i need is the command to block an IP address from command line,
 not
  touching any pf.conf

 If you don't need to add a rule but an IP, then tables are your friend.
 Example for /etc/pf.conf:
 # Placeholder for spammers table, non-routable network IP.
 table spammers persist { 192.168.111.111 }
 # Block this traffic
 block return-rst in log on $ext_if proto tcp from spammers port smtp

 Then on the command line:
 /sbin/pfctl -t spammers -Tadd ip.from.new.spammer
 And to delete:
 /sbin/pfctl -t spammers -Tdel ip.from.old.spammer

 --
 Mel
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]



Hi,
I put this on /etc/pf.conf
external_addr=192.168.1.11 which is the address of the only interface.
This machine isn't a router.

block drop in quick on $ext_if inet proto tcp from 192.168.0.1 to
$external_addr port ssh

but when i try to connect from 192.168.0.1 i connect with no problems...this
rule is to block access..
What am i doing wrong..is my first time with pf...

Thankss...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 6.2 AMD64 Ports Problem

2007-09-17 Thread Philip M. Gollucci
[EMAIL PROTECTED] wrote:
 I downloaded the 6.2 AMD64 disk 1 iso, installed it and updated the ports with
 
 cvsup. However, when I try to install xorg it's looking for ports that are 
 not in
 
 the packages-6.2 folder. Instead they are in the packages-7-current or
 
 packages-current folder. Is it safe to install from those folders?
Not on a 6.2 system.  They would link against libc.so.7 and you'd only
have libc.so.6 for one.

I did not have this problem.


 In an attempt to get one of the updated ports I put in the /root/.profile
 
 PKG_PATH=ftp://ftp.freebsd.org/pub/FreeBSD/ports/amb64/packages-current; and
 
 logged out. But when I run PKG_ADD -r dri-7.0.1,2.tbz. It tells me it could 
 not
 
 find the port.
You want PACKAGESITE
i.e.
PACKAGESITE=ftp://ftp13.freebsd.org/pub/FreeBSD/ports/amd64/packages-6.2-release/Latest/

The trailing / is important.


-- 

Philip M. Gollucci ([EMAIL PROTECTED]) c:323.219.4708 o:703.749.9295x206
Senior System Admin - Riderway, Inc.
http://riderway.com / http://ridecharge.com
1024D/EC88A0BF 0DE5 C55C 6BF3 B235 2DAB  B89E 1324 9B4F EC88 A0BF

Work like you don't need the money,
love like you'll never get hurt,
and dance like nobody's watching.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 6.2 AMD64 Ports Problem

2007-09-17 Thread forum
Thats weird. When I updated using cvsup it updated all of the ports in my
/usr/ports directory. I then ran make install on /usr/ports/x11/xorg, it then
looks for dri-7.0.1,2.tbz, but that file isn't in
amd64/packages-6.2-release/latest or amd64/packages-6.2-release/graphics/. It is
only in the packages-7-release/graphics directory. 
Why would xorg require a app that isn't in my current build? How do I get around
it if I cant use the packages-7-release files?

Thanks for you help

Thron

On Mon Sep 17 11:21 , Philip M. Gollucci  sent:

[EMAIL PROTECTED] wrote:
 I downloaded the 6.2 AMD64 disk 1 iso, installed it and updated the ports 
 with
 
 cvsup. However, when I try to install xorg it's looking for ports that are 
 not in
 
 the packages-6.2 folder. Instead they are in the packages-7-current or
 
 packages-current folder. Is it safe to install from those folders?
Not on a 6.2 system.  They would link against libc.so.7 and you'd only
have libc.so.6 for one.

I did not have this problem.


 In an attempt to get one of the updated ports I put in the /root/.profile
 
 PKG_PATH=ftp://ftp.freebsd.org/pub/FreeBSD/ports/amb64/packages-current; and
 
 logged out. But when I run PKG_ADD -r dri-7.0.1,2.tbz. It tells me it could 
 not
 
 find the port.
You want PACKAGESITE
i.e.
PACKAGESITE=ftp://ftp13.freebsd.org/pub/FreeBSD/ports/amd64/packages-6.2-release/Latest/

The trailing / is important.


-- 

Philip M. Gollucci ([EMAIL PROTECTED]) c:323.219.4708 o:703.749.9295x206
Senior System Admin - Riderway, Inc.
http://riderway.com / http://ridecharge.com
1024D/EC88A0BF 0DE5 C55C 6BF3 B235 2DAB  B89E 1324 9B4F EC88 A0BF

Work like you don't need the money,
love like you'll never get hurt,
and dance like nobody's watching.




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Unable to delete a package

2007-09-17 Thread lawrence.petrykanyn

Hi,

(I originally posted this on the freebsd-gnome mailing list and then 
realized that list was for people actively working on Gnome.  I don't know 
if my question is a Gnome-specific issue or if it is an issue that can arise 
when installing programs in general.)


I am currently using FreeBSD 6.2 RELEASE and I am trying to install 
gnome2-office via the ports collection.  After running 'portsnap fetch 
update' I 'make install clean' in the gnome2-office directory. It goes well 
until:


   *
   *
   *
gmake[2]: Entering directory
`/usr/ports/databases/libgda3/work/libgda-1.9.102/doc/C'
gmake[2]: Nothing to be done for `all'.
gmake[2]: Leaving directory
`/usr/ports/databases/libgda3/work/libgda-1.9.102/doc/C'
gmake[2]: Entering directory
`/usr/ports/databases/libgda3/work/libgda-1.9.102/doc'
gmake[2]: Nothing to be done for `all-am'.
gmake[2]: Leaving directory
`/usr/ports/databases/libgda3/work/libgda-1.9.102/doc'
gmake[1]: Leaving directory
`/usr/ports/databases/libgda3/work/libgda-1.9.102/doc'
gmake[1]: Entering directory
`/usr/ports/databases/libgda3/work/libgda-1.9.102'
gmake[1]: Nothing to be done for `all-am'.
gmake[1]: Leaving directory
`/usr/ports/databases/libgda3/work/libgda-1.9.102'
===  Installing for libgda3-1.9.102_3
===  libgda3-1.9.102_3 conflicts with installed package(s):
 libgda2-1.2.4_1,1
 They install files into the same place.
 Please remove them first with pkg_delete(1).
*** Error code 1
Stop in /usr/ports/databases/libgda3.
*** Error code 1
Stop in /usr/ports/math/gnumeric.
*** Error code 1
Stop in /usr/ports/math/gnumeric.
*** Error code 1
Stop in /usr/ports/editors/gnome2-office.
***


  ...so I:


root# pkg_delete libgda2-1.2.4_1,1
pkg_delete: package 'libgda2-1.2.4_1,1' is required by these other packages
and may not be deinstalled:
py25-gnome-extras-2.14.3_3
straw-0.27
gnome2-fifth-toe-2.18.3
***


   ...so I then try to install the new libgda separately:

root# make install clean
===  Installing for libgda3-1.9.102_3
===  libgda3-1.9.102_3 conflicts with installed package(s):
 libgda2-1.2.4_1,1
 They install files into the same place.
 Please remove them first with pkg_delete(1).
*** Error code 1

I am new to the subtle inner workings of FreeBSD.  Could anyone please
advise, suggest, or comment on how I should proceed?  It seems that
I can't install the new libgda unless I delete the old one, but I am
prevented from deleting the old one because at least three other programs
are dependent upon it.

(As an aside, is it okay to run these installations from a terminal window
from inside the Gnome GUI environment, or should I be outside of Gnome
altogether when I do program installations/upgrades?)

Thanks,
Larry


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: flash plugin after xorg update

2007-09-17 Thread Zbigniew Komarnicki
On Monday 17 of September 2007 16:15:16 you wrote:
 This flash issue has made me reconsider buying a low-end laptop running
 vista, so I dont have the urgency to deal with this issue. One thing I need
 flash to work is that I watch mlbtv, and it requires flash plugin to
 initiate. Also for some other multimedia on the internet, having flash
 working just makes it so much easier... uhn

 TFC

Yes... :-)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 6.2 AMD64 Ports Problem

2007-09-17 Thread Kris Kennaway

[EMAIL PROTECTED] wrote:

Thats weird. When I updated using cvsup it updated all of the ports in my
/usr/ports directory. I then ran make install on /usr/ports/x11/xorg, it then
looks for dri-7.0.1,2.tbz, but that file isn't in
amd64/packages-6.2-release/latest or amd64/packages-6.2-release/graphics/. It is
only in the packages-7-release/graphics directory. 
Why would xorg require a app that isn't in my current build? How do I get around

it if I cant use the packages-7-release files?


A couple of points:

1) 'make install' doesn't try to install packages, it installs ports. 
In particular 'make install' doesn't fetch packages from the FTP site, 
these are added by pkg_add -r (and other commands).


2) Updated packages for 6.x are in the packages-6-stable/ directory.

Kris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Clarification on updating FreeBSD through csup

2007-09-17 Thread Daniel Bye
On Mon, Sep 17, 2007 at 09:24:26PM +0400, Rakhesh Sasidharan wrote:
 
 Hi there!
 
 Just seeking a clarification on keeping FreeBSD up-to-date through csup. I 
 am on FreeBSD 6.2 and want to keep up-to-date for security patches 
 etc.
 
 I understand I can use csup to follow the RELENG_62 branch. After the 
 sources are downloaded, do I have to follow all the steps outlined in this 
 (http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html) 
 handbook document? I can understand building and installing world and 
 kernel, but would I have to reboot to single user and do the mergemaster 
 stuff too?

If you follow the complete rebuild instructions, yes. If you follow the
instructions for *patching* the system as given in the relevant security
notifications, then only if those instructions say so. You do subscribe
to security-notifications@, don't you?  ;-)

 I *think* I might not have to do mergemaster coz security updates 
 shouldn't have changes in the /etc files and so there'd be no need for 
 merging files.

Sometimes, the security fixes involve changes under /etc. The recent
jails error comes to mind, as a case in point.

 And I *think* I might have to reboot depending on whether I 
 use the stuff being affected or not ... But I'd like a clarify 
 from more knowledgeable folks nevertheless. :)

If you follow the full procedure (buildworld, buildkernel, installkernel,
installworld), then you absolutely must reboot after installing the new 
kernel, and before installing the new world. Not doing so will soon lead 
along the road to madness as your userland and kernel get out of step. As 
I said above, though, if you follow the shorter instructions given in the 
security notifications, then you may not need to - it depends very much on 
which bit of the system is affected by the changes. 

 Also, would the make buildworld installworld part take a long time? Or 
 through the magic of make it just compiles the stuff that's getting 
 updated (and stuff that requires on this)?

The time taken depends very much on the specification of your system. My
old Sun Ultra SPARC10, for example, takes up to 14 hours to do a full
buildworld/buildkernel sequence, whereas the core duo boxes I look after
for clients, zip through it in less then 1.5 hours.

I'd suggest trying it out on a non-critical system, so as to familiarise
yourself with the procedure. You'll be glad you did.

Dan 


-- 
Daniel Bye

PGP Key: http://www.slightlystrange.org/pgpkey-dan.asc
PGP Key fingerprint: D349 B109 0EB8 2554 4D75  B79A 8B17 F97C 1622 166A


pgp1yY9Rfs2X8.pgp
Description: PGP signature


named-bind-9

2007-09-17 Thread User Iam
HI

I am having  problems with my zone file...
There used to be a command to run and check zone files/Named files..

I can't seem to locate it...??

Anyone have a clue??

TIA

User Iam
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is there any way of turning muttrc list into an evolution or other mail alias database?

2007-09-17 Thread Gary Kline
On Mon, Sep 17, 2007 at 06:46:20PM +0400, Andrew Pantyukhin wrote:
 On Sun, Sep 16, 2007 at 09:27:03PM -0700, Gary Kline wrote:
  
  This may be a bit off the wall, but does anybody have a tool to
  take my dozens of mutt  aliases and turn them into an evolution
  -style database format?  (if not, is there any universal
  address-book app that I could use?)
 
 A sed one-liner could probably solve the problem, but try
 mail/abook - it's a nice converter.

Can you help me with the exact syntax?  As a test, I tried:
 abook --convert --informat mutt  --infile /home/kline/.mutt/muttrc --outformat 
abook --outfile abook

An emtpy file ~/.abook/addressbook.new was created.  ((I still 
stand by what I'd said for years, that a few examples are worth
10K words.))

Re a sed line to get this stuff into ~/.evolution/*, maybe.  This
may be where another very simple perl script would serve btter.
Further clues very welcome.

gary

-- 
  Gary Kline  [EMAIL PROTECTED]   www.thought.org  Public Service Unix
  http://jottings.thought.org   http://transfinite.thought.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: named-bind-9

2007-09-17 Thread David Robillard
 I am having  problems with my zone file...
 There used to be a command to run and check zone files/Named files..

 I can't seem to locate it...??

See named-checkzone(8) and named-checkconf(8)

David
-- 
David Robillard
UNIX systems administrator  Oracle DBA
CISSP, RHCE  Sun Certified Security Administrator
Montreal: +1 514 966 0122
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mixer levels on boot

2007-09-17 Thread Rob

Harry Doyle wrote:

however whenever i reboot the machine the mixer command always shows the
default level of 90 which clips pretty hard.


My 6.2 system saves and restores the mixer settings across boots.  Apparently 
in the file /var/db/mixer0-state   However, the file is root owned and 644;  
perhaps if you create the  file and chmod it writable, your settings will stick?

Or you could put the command in your script.  mixer -S dumps the current 
settings in a format mixer can read back.  I do this in a script that dribbles music on 
hold to our phone system:


mixer_default=vol 45:45 pcm 40:40

# Call mixer command to set params specified in conf file, or defaults.
set_mixer() {
 if [ -f $home_dir/mixer.conf ]; then
   mixer `cat $home_dir/mixer.conf`
   echo set mixer.conf params
 else
   mixer $mixer_default
   echo set mixer default values
 fi
}


 -RW

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cron jobs not done during sleep

2007-09-17 Thread RW
On Mon, 17 Sep 2007 08:22:45 -0700
Steve Franks [EMAIL PROTECTED] wrote:

 Is there a tool or setting to implement this functionality?  I want
 something to happen weekly, I don't care when. 

One way is to install a crontab replacement like fcron, but the easiest
way to handle this is to install anacron, which works in conjunction
with crontab. 

With anacron you need to comment out the three periodic calls
in /etc/crontab so anacron can schedule them itself - it has a
default .conf file to do this. Adding anacron_enable=yes to rc.conf
causes it to run tasks at boot-up. You should also add one or more
entries to crontab to make it run during the night.

0004 ***root/usr/local/sbin/anacron


It's actually not essential to set anacron_enable=yes I just use
crontab to run it several times a day at convenient time.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Building a new workstation - dual or quad-core CPU for FreeBSD 7?

2007-09-17 Thread Philip M. Gollucci
Kris Kennaway wrote:
 Josh Carroll wrote:
 That's good to know.  You should be using libthr for threaded
 performance though :)  That benchmark is probably almost all userland
 though, so performance may not suffer much from libpthread.
 Oh I wasn't sure if libthr was the preferred thread library for 6.2
 also (I'd heard that was the case for -CURRENT).

 I should look into whether ffmpeg can be built with libthr instead and
 compare performance. Somewhat off topic, so I'll leave it at that, but
 thanks again for the great info. I'm really looking forward to
 7.0-RELEASE, obviously :)
 
 Yeah, it is preferred on 6.x too (libkse has truly atrocious
 performance).  It's trivial to change it over, just add an entry to
 /etc/libmap.conf:
Really?  I didn't you you were supposed to switch until 7.0 -- were the
libthr chnages MFC'd and I missed it ?

I've read
http://people.freebsd.org/~kris/scaling/mysql.html
and
http://wiki.freebsd.org/MySQL

I've been following the discussions on this pretty closely on lists.

PU: Intel(R) Xeon(R) CPU   E5310  @ 1.60GHz (1597.53-MHz
K8-class CPU)
  Origin = GenuineIntel  Id = 0x6f7  Stepping = 7

Features=0xbfebfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE

Features2=0x4e33dSSE3,RSVD2,MON,DS_CPL,VMX,TM2,b9,CX16,b14,b15,b18
  AMD Features=0x20100800SYSCALL,NX,LM
  AMD Features2=0x1LAHF
  Cores per package: 4
real memory  = 9395240960 (8960 MB)
avail memory = 8291323904 (7907 MB)
FreeBSD/SMP: Multiprocessor System Detected: 8 CPUs

uname -a
FreeBSD hobbes.dca2.prod.rws 6.2-RELEASE FreeBSD 6.2-RELEASE #0:
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/SMP  amd64

I'll recompile the kernel eventually to slim it down.

using 4BSD scheduler since its 6.2

ls -1d /var/db/pkg/mysql*
mysql-client-5.0.45
mysql-scripts-5.0.45
mysql-server-5.0.45

ldd /usr/local/libexec/mysqld
mysqld:
libz.so.3 = /lib/libz.so.3 (0x800a5c000)
libwrap.so.4 = /usr/lib/libwrap.so.4 (0x800b7)
libcrypt.so.3 = /lib/libcrypt.so.3 (0x800c79000)
libstdc++.so.5 = /usr/lib/libstdc++.so.5 (0x800d92000)
libm.so.4 = /lib/libm.so.4 (0x800f89000)
libpthread.so.2 = /lib/libpthread.so.2 (0x8010a5000)
libc.so.6 = /lib/libc.so.6 (0x8011d)


sysctl kern.timecounter.choice
   kern.timecounter.choice: TSC(-100) ACPI-fast(1000) i8254(0)
dummy(-100)

sysctl kern.timecounter.hardware
kern.timecounter.hardware: TSC

Disks are:
1) RAID1(2 disks) OS array with mysql logs, replication logs,
and innodb logs.
2) RAID1+0(6disks) innodb mysql data.
3) /tmp is a md0 malloc backed device
(I'm thinking of using tmpfs in 7.0 when I switch)

using libmap.conf to use libc_r, libpthread, and libthr were all about
equal actually for insert heavy operations.

my.cnf
innodb_thread_concurrency = 8

At 16 aka core*2 'show innodb status' showed too much mutex locking and
dropping it had drastic improvements -- despite mysql recommending the
2x value.

innodb_flush_log_at_trx_commit = 0
Also helped about 7% but thats due to disk speeds.

I can run an oltp sysbench on it if you would like.




Philip M. Gollucci ([EMAIL PROTECTED]) c:323.219.4708 o:703.749.9295x206
Senior System Admin - Riderway, Inc.
http://riderway.com / http://ridecharge.com
1024D/EC88A0BF 0DE5 C55C 6BF3 B235 2DAB  B89E 1324 9B4F EC88 A0BF

Work like you don't need the money,
love like you'll never get hurt,
and dance like nobody's watching.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


increasing maximum connections in PGSQL

2007-09-17 Thread Tim Kellers
If I need to raise the maximum connections to a PostgreSQL server (v 
postgresql-server-7.4.17) on FreeBSD 6.2 -STABLE, Ineed to raise the 
available semaphores to increase connectivity.  After doing a man -k on 
sem and reading through the man pages that see relevant, I'm still 
unable to determine the correct method, though it does look like it may 
involve loading a module in /bot/loader conf.


Can anyone point me to some How-to documentation on raising this value 
to increase postgresql connections?


Thanks
Tim
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Unable to delete a package

2007-09-17 Thread Don Read
On Mon, 17 Sep 2007 18:34:15 + [EMAIL PROTECTED]
said:

snip
 ===  Installing for libgda3-1.9.102_3
 ===  libgda3-1.9.102_3 conflicts with installed package(s):
  libgda2-1.2.4_1,1
  They install files into the same place.
  Please remove them first with pkg_delete(1).
snip

   ...so I:


 root# pkg_delete libgda2-1.2.4_1,1
 pkg_delete: package 'libgda2-1.2.4_1,1' is required by these other
 packages and may not be deinstalled:
 py25-gnome-extras-2.14.3_3
 straw-0.27
 gnome2-fifth-toe-2.18.3
 ***

...so I then try to install the new libgda separately:

Try using the '-f' force flag as in:
 pkg_delete -f libgda2-1.2.4_1,1'

Regards,
-- 
Don Read  [EMAIL PROTECTED]
-- It's always darkest before the dawn. So if you are going to 
   steal the neighbor's newspaper, that's the time to do it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is there any way of turning muttrc list into an evolution or other mail alias database?

2007-09-17 Thread Andrew Pantyukhin
On Mon, Sep 17, 2007 at 12:35:51PM -0700, Gary Kline wrote:
 On Mon, Sep 17, 2007 at 06:46:20PM +0400, Andrew Pantyukhin wrote:
  On Sun, Sep 16, 2007 at 09:27:03PM -0700, Gary Kline wrote:
   
   This may be a bit off the wall, but does anybody have a tool to
   take my dozens of mutt  aliases and turn them into an evolution
   -style database format?  (if not, is there any universal
   address-book app that I could use?)
  
  A sed one-liner could probably solve the problem, but try
  mail/abook - it's a nice converter.
 
 Can you help me with the exact syntax?  As a test, I tried:
  abook --convert --informat mutt  --infile
  /home/kline/.mutt/muttrc --outformat abook --outfile abook

I think you should put your aliases in a separate file and use
that as an infile.

 An emtpy file ~/.abook/addressbook.new was created.  ((I still
 stand by what I'd said for years, that a few examples are worth
 10K words.))
 
 Re a sed line to get this stuff into ~/.evolution/*, maybe.
 This may be where another very simple perl script would serve
 btter.  Further clues very welcome.

Google says something about evo being able to import ldif files.
Abook can convert mutt's aliases into ldif.

P.S. Must you really insert a tab before each line in your
messages? It certainly doesn't make them look pretty.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


mixer levels on boot

2007-09-17 Thread Harry Doyle
hello everyone,
i am running a freebsd server to stream my local campus station's radio
broadcast to the net. i am using the stock ac97 audio, and using a little
script in /usr/local/etc/rc.d which uses kldload to load the driver.

i have to issue mixer rec -83 to get the audio down to a decent level (very
hot coming out of the mixer but i can't change that for other reasons). i
have tried to script this mixer command into startup by putting a  sleep
command and then the mixer command, and also by using the /boot/boot.hints
file.

however whenever i reboot the machine the mixer command always shows the
default level of 90 which clips pretty hard.

also, the sound driver doesn't seem to load until around 2 minutes after i
can log into a fresh boot (not a problem, just some extra info). how can i
script my default rec level on boot?

thanks,
harry
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Unable to delete a package

2007-09-17 Thread Kent Stewart
On Monday 17 September 2007, [EMAIL PROTECTED] wrote:
 Hi,

 (I originally posted this on the freebsd-gnome mailing list and then
 realized that list was for people actively working on Gnome.  I don't
 know if my question is a Gnome-specific issue or if it is an issue
 that can arise when installing programs in general.)

 I am currently using FreeBSD 6.2 RELEASE and I am trying to install
 gnome2-office via the ports collection.  After running 'portsnap
 fetch update' I 'make install clean' in the gnome2-office directory.
 It goes well until:

 *
 *
 *
 gmake[2]: Entering directory
 `/usr/ports/databases/libgda3/work/libgda-1.9.102/doc/C'
 gmake[2]: Nothing to be done for `all'.
 gmake[2]: Leaving directory
 `/usr/ports/databases/libgda3/work/libgda-1.9.102/doc/C'
 gmake[2]: Entering directory
 `/usr/ports/databases/libgda3/work/libgda-1.9.102/doc'
 gmake[2]: Nothing to be done for `all-am'.
 gmake[2]: Leaving directory
 `/usr/ports/databases/libgda3/work/libgda-1.9.102/doc'
 gmake[1]: Leaving directory
 `/usr/ports/databases/libgda3/work/libgda-1.9.102/doc'
 gmake[1]: Entering directory
 `/usr/ports/databases/libgda3/work/libgda-1.9.102'
 gmake[1]: Nothing to be done for `all-am'.
 gmake[1]: Leaving directory
 `/usr/ports/databases/libgda3/work/libgda-1.9.102'
 ===  Installing for libgda3-1.9.102_3
 ===  libgda3-1.9.102_3 conflicts with installed package(s):
   libgda2-1.2.4_1,1
   They install files into the same place.
   Please remove them first with pkg_delete(1).
 *** Error code 1
 Stop in /usr/ports/databases/libgda3.
 *** Error code 1
 Stop in /usr/ports/math/gnumeric.
 *** Error code 1
 Stop in /usr/ports/math/gnumeric.
 *** Error code 1
 Stop in /usr/ports/editors/gnome2-office.
 ***


...so I:


 root# pkg_delete libgda2-1.2.4_1,1
 pkg_delete: package 'libgda2-1.2.4_1,1' is required by these other
 packages and may not be deinstalled:

man pkg_delete

see the option -f to force the deletion

Kent

 py25-gnome-extras-2.14.3_3
 straw-0.27
 gnome2-fifth-toe-2.18.3
 ***


 ...so I then try to install the new libgda separately:

 root# make install clean
 ===  Installing for libgda3-1.9.102_3
 ===  libgda3-1.9.102_3 conflicts with installed package(s):
   libgda2-1.2.4_1,1
   They install files into the same place.
   Please remove them first with pkg_delete(1).
 *** Error code 1

 I am new to the subtle inner workings of FreeBSD.  Could anyone
 please advise, suggest, or comment on how I should proceed?  It seems
 that I can't install the new libgda unless I delete the old one, but
 I am prevented from deleting the old one because at least three other
 programs are dependent upon it.

 (As an aside, is it okay to run these installations from a terminal
 window from inside the Gnome GUI environment, or should I be outside
 of Gnome altogether when I do program installations/upgrades?)

 Thanks,
 Larry


 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]



-- 
Kent Stewart
Richland, WA

http://www.soyandina.com/ I am Andean project.
http://users.owt.com/kstewart/index.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: increasing maximum connections in PGSQL

2007-09-17 Thread Peter Schuller
 Can anyone point me to some How-to documentation on raising this value to 
 increase postgresql connections?

http://www.postgresql.org/docs/8.2/static/kernel-resources.html

-- 
/ Peter Schuller

PGP userID: 0xE9758B7D or 'Peter Schuller [EMAIL PROTECTED]'
Key retrieval: Send an E-Mail to [EMAIL PROTECTED]
E-Mail: [EMAIL PROTECTED] Web: http://www.scode.org



pgp0QxLEa4M4W.pgp
Description: PGP signature


Re: Unable to delete a package

2007-09-17 Thread Peter Schuller
 ===  Installing for libgda3-1.9.102_3
 ===  libgda3-1.9.102_3 conflicts with installed package(s):
  libgda2-1.2.4_1,1
  They install files into the same place.
  Please remove them first with pkg_delete(1).

As people have noted you can use -f to force deletion. The problem you
are experiencing would typically happen either because you are trying
to install some top-level packages that are truly in conflict, in the
sense that they depend on conflicting versions of libgda.

Alternatively, you have older versions of various packages installed
that depend on the older version of libgda3, and are now trying to
install the gnome stuff from a newer ports tree. In this case you may
want to perform a full upgrade (using
portupgrade/portmanagaer/portmaster/etc).

forcibly deleting the package will work, but the other packages
depending on them will very likely break.

 (As an aside, is it okay to run these installations from a terminal window
 from inside the Gnome GUI environment, or should I be outside of Gnome
 altogether when I do program installations/upgrades?)

It doesn't matter, except in so far as any actions would kill your
running terminal. I would suspect that the already running terminal
would survive (certainly this is the case with most), though I don't
know if the gnome terminal is doing stuff even after initial start-up
that might cause it to die.

(To be strict of course it's always safest to not run stuff you are
actively upgrading, while upgrading. In practice though it tends to
work.)

-- 
/ Peter Schuller

PGP userID: 0xE9758B7D or 'Peter Schuller [EMAIL PROTECTED]'
Key retrieval: Send an E-Mail to [EMAIL PROTECTED]
E-Mail: [EMAIL PROTECTED] Web: http://www.scode.org



pgpqO0EpOXXKW.pgp
Description: PGP signature


Problem with FreeBSD and external storage

2007-09-17 Thread Miguel Angelo
Hi,
   
  I'm trying to put external disks(storage) in my FreeBSD server, but, i only 
can't see the disks that was allocated.
  I think that is necessary sometype of confugurations, because the hba was 
installed and all procedures necessary too.
   
  For information.
   
  Connection type -- SAN with switch MACdata and EMC storage.
  Note: I can see the storage array in dmesg.(see example above).
   
  I would like so much if somewhere can help.
   
  thank's for all.
   
  
**
   
# dmesg
  Copyright (c) 1992-2007 The FreeBSD Project.
  Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
  The Regents of the University of California. All rights reserved.
  FreeBSD is a registered trademark of The FreeBSD Foundation.
  FreeBSD 6.2-RELEASE #0: Thu May 31 10:58:03 UTC 2007
  root@:/usr/obj/usr/src/sys/LAB
  MPTable:   Kings Canyon
  Timecounter i8254 frequency 1193182 Hz quality 0
  CPU: Intel(R) Xeon(TM) CPU 2.40GHz (2400.10-MHz 686-class CPU)
Origin = GenuineIntel  Id = 0xf27  Stepping = 7

Features=0xbfebfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE
Features2=0x4400CNTX-ID,b14
Logical CPUs per core: 2
  real memory  = 2146959360 (2047 MB)
  avail memory = 2095882240 (1998 MB)
  FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
   cpu0 (BSP): APIC ID:  0
   cpu1 (AP): APIC ID:  1
   cpu2 (AP): APIC ID:  6
   cpu3 (AP): APIC ID:  7
  ioapic0: Assuming intbase of 0
  ioapic1: Assuming intbase of 24
  ioapic2: Assuming intbase of 48
  ioapic0 Version 2.0 irqs 0-23 on motherboard
  ioapic1 Version 2.0 irqs 24-47 on motherboard
  ioapic2 Version 2.0 irqs 48-71 on motherboard
  kbd1 at kbdmux0
  cpu0 on motherboard
  cpu1 on motherboard
  cpu2 on motherboard
  cpu3 on motherboard
  pcib0: MPTable Host-PCI bridge pcibus 0 on motherboard
  pci0: PCI bus on pcib0
  pci0: unknown at device 0.1 (no driver attached)
  pcib1: PCI-PCI bridge at device 2.0 on pci0
  pci1: PCI bus on pcib1
  pci1: base peripheral, interrupt controller at device 28.0 (no driver 
attached)
  pcib2: MPTable PCI-PCI bridge at device 29.0 on pci1
  pci2: PCI bus on pcib2
  mpt0: LSILogic 1030 Ultra4 Adapter port 0x3000-0x30ff mem 
0xfc22-0xfc23,0xfc20-0xfc21 irq 48 at device 1.0 on pci2
  mpt0: [GIANT-LOCKED]
  mpt0: MPI Version=1.2.14.0
  em0: Intel(R) PRO/1000 Network Connection Version - 6.2.9 port 
0x3400-0x343f mem 0xfc24-0xfc25 irq 54 at device 3.0 on pci2
  em0: Ethernet address: 00:30:48:25:6b:ca
  pci1: base peripheral, interrupt controller at device 30.0 (no driver 
attached)
  pcib3: MPTable PCI-PCI bridge at device 31.0 on pci1
  pci3: PCI bus on pcib3
  ahd0: Adaptec AIC7902 Ultra320 SCSI adapter port 
0x4400-0x44ff,0x4000-0x40ff mem 0xfc30-0xfc301fff irq 32 at device 2.0 on 
pci3
  ahd0: [GIANT-LOCKED]
  aic7902: Ultra320 Wide Channel A, SCSI Id=7, PCI-X 101-133Mhz, 512 SCBs
  ahd1: Adaptec AIC7902 Ultra320 SCSI adapter port 
0x4c00-0x4cff,0x4800-0x48ff mem 0xfc302000-0xfc303fff irq 33 at device 2.1 on 
pci3
  ahd1: [GIANT-LOCKED]
  aic7902: Ultra320 Wide Channel B, SCSI Id=7, PCI-X 101-133Mhz, 512 SCBs
  isp0: Qlogic ISP 2312 PCI FC-AL Adapter port 0x5000-0x50ff mem 
0xfc304000-0xfc304fff irq 28 at device 3.0 on pci3
  isp0: set PCI line size to 16
  isp0: [GIANT-LOCKED]
  isp0: Board Type 2312, Chip Revision 0x2, resident F/W Revision 3.3.19
  isp0: 839 max I/O commands supported
  isp0: NVRAM Port WWN 0x21e08b9a13ea
  pci0: serial bus, USB at device 29.0 (no driver attached)
  pci0: serial bus, USB at device 29.1 (no driver attached)
  pci0: serial bus, USB at device 29.2 (no driver attached)
  pcib4: MPTable PCI-PCI bridge at device 30.0 on pci0
  pci4: PCI bus on pcib4
  atapci0: HighPoint HPT374 (channel 0+1) UDMA133 controller port 
0x6c50-0x6c57,0x6c44-0x6c47,0x6c48-0x6c4f,0x6c40-0x6c43,0x6000-0x60ff irq 16 at 
device 1.0 on pci4
  ata2: ATA channel 0 on atapci0
  ata3: ATA channel 1 on atapci0
  atapci1: HighPoint HPT374 (channel 2+3) UDMA133 controller port 
0x6c68-0x6c6f,0x6c5c-0x6c5f,0x6c60-0x6c67,0x6c58-0x6c5b,0x6400-0x64ff irq 16 at 
device 1.1 on pci4
  ata4: ATA channel 0 on atapci1
  ata5: ATA channel 1 on atapci1
  pci4: display, VGA at device 4.0 (no driver attached)
  fxp0: Intel 82551 Pro/100 Ethernet port 0x6c00-0x6c3f mem 
0xfc401000-0xfc401fff,0xfc42-0xfc43 irq 22 at device 5.0 on pci4
  miibus0: MII bus on fxp0
  inphy0: i82555 10/100 media interface on miibus0
  inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
  fxp0: Ethernet address: 00:30:48:25:6b:cb
  isab0: PCI-ISA bridge at device 31.0 on pci0
  isa0: ISA bus on isab0
  atapci2: Intel ICH3 UDMA100 controller port 
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x2060-0x206f at device 31.1 on pci0
  ata0: ATA channel 0 on atapci2
  ata1: ATA channel 1 on atapci2
  pci0: serial bus, 

Re: Good FreeBSD Supported Gigabit Ethernet Card?

2007-09-17 Thread Preston Hagar
On 9/14/07, Oliver Hansen [EMAIL PROTECTED] wrote:
 I'm looking to eventually upgrade my home network to all gigabit so I'm
 going to start by purchasing a few NICs for some old servers I just
 received. I know there are quite a few supported by FreeBSD6 which I found
 ( http://www.freebsd.org/releases/6.0R/hardware-i386.html#ETHERNET ) but
 I'm wondering if there is any real benefit in buying a $40 or $50 NIC
 like the Netgear GA311 or just get a $20 NIC like the D-Link DFE-530TX+.
 The use will probably be a firewall, proxy, file server, and DVR.
 http://www.EagleBit.com/Netgear_GA311_Gigabit_PCI_Card_p/eb-400-00357.htm

 --
 Oliver Hansen
 http://www.oliverhansen.com




As others have stated, Intel's are great.  I would highly recommend
them.  Just as a heads up in case you weren't aware, in your research
and purchase watch out for vendors switching chipsets within card
models.  Linksys is very bad about this.  If I remember correctly,
their most common GigE card has one model number, but 3 versions, all
of which have different chipsets.  As I recall, the 1st version works
well, the second so-so and the third not at all.  To add to the fun,
they no longer print the revision on the outside of the box, the only
way to find out is to open up the package and look at the chip on the
card.  Sorry if I sound a little bitter, I just recently had to
purchase a GigE card for a couple of  OpenBSD servers, needed them
right away, and had to go to several brick and mortar stores asking to
open the packages to make sure cards would work when I got them back
to the office.

Anyway, vendors other than Linksys do this as well, so just keep an
eye out for it.  Usually, no matter what the chipset, Intels seem to
be well supported.  I also had good success with the D-Link DGE-560T
PCI Express card and the DGE-530T PCI card under OpenBSD.

Hope this helps.

Preston
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


SMTP Error from my server?

2007-09-17 Thread Chris Maness
I have not seen this error before.  What does it mean?  (I will change 
the actual e-mail to protect the address from spam bots).


To: [EMAIL PROTECTED]

From: Mail Administrator Postmaster@PostmasterDomain
Subject: Mail System Error - Returned Mail
Date: Mon, 17 Sep 2007 14:48:17 -0400

This Message was undeliverable due to the following reason:

Your message was not delivered because the return address was refused.

The return address was [EMAIL PROTECTED]

Please reply to Postmaster@PostmasterDomain
if you feel this message to be in error.


Chris Maness
Sys Admin


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SMTP Error from my server?

2007-09-17 Thread Jay Chandler

Chris Maness wrote:
I have not seen this error before.  What does it mean?  (I will change 
the actual e-mail to protect the address from spam bots).


To: [EMAIL PROTECTED]

From: Mail Administrator Postmaster@PostmasterDomain
Subject: Mail System Error - Returned Mail
Date: Mon, 17 Sep 2007 14:48:17 -0400

This Message was undeliverable due to the following reason:

Your message was not delivered because the return address was refused.

The return address was [EMAIL PROTECTED]

Please reply to Postmaster@PostmasterDomain
if you feel this message to be in error.


Chris Maness
Sys Admin


Looks to me like a failed sender verification callout-- these are 
generally construed to be abusive.  I can't easily tell from your 
munging whether it's your server or Adelphia that's doing it, though.


--
Jay Chandler / KB1JWQ
Living Legend / Systems Exorcist
Today's Excuse: SCSI Chain overterminated

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


How do I link evolution to a my browser of choice?

2007-09-17 Thread Gary Kline

Hopefully there's an easy solution to this question.  
Now that I have evolution installed on my new-tao, I want to
link it to mail in such a way that if I send myself a URL 
or one is included in a messagethat firebox or konquorer 
opens that embedded URL.  

I just check, having sent a website from another server (via
evolution).  Zip.  If I right-click, and try to copy the URL, 
again, nada.   Is there (hopefully) a config file where I can
select which browser?

A related question is: can  I use my firefox bookmarks file in
konquorer?

IOW::: help.  I hate typing godawfullong URL's!!!

gary


-- 
  Gary Kline  [EMAIL PROTECTED]   www.thought.org  Public Service Unix
  http://jottings.thought.org   http://transfinite.thought.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SMTP Error from my server?

2007-09-17 Thread Chris Maness

Jay Chandler wrote:

Chris Maness wrote:
I have not seen this error before.  What does it mean?  (I will 
change the actual e-mail to protect the address from spam bots).


To: [EMAIL PROTECTED]

From: Mail Administrator Postmaster@PostmasterDomain
Subject: Mail System Error - Returned Mail
Date: Mon, 17 Sep 2007 14:48:17 -0400

This Message was undeliverable due to the following reason:

Your message was not delivered because the return address was refused.

The return address was [EMAIL PROTECTED]

Please reply to Postmaster@PostmasterDomain
if you feel this message to be in error.


Chris Maness
Sys Admin


Looks to me like a failed sender verification callout-- these are 
generally construed to be abusive.  I can't easily tell from your 
munging whether it's your server or Adelphia that's doing it, though.


This is the only e-mail address that I am having this problem with, and 
it has been going on for a year or so now.  What other info would you 
guys need to tell what it is.  I guess I don't understand the whole 
sender verification callout  I'll have to do a little google to find out.


Thanks,
Chris Maness
Sys Admin for a couple of tiny domains.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is there any way of turning muttrc list into an evolution or other mail alias database?

2007-09-17 Thread Gary Kline
On Tue, Sep 18, 2007 at 01:24:33AM +0400, Andrew Pantyukhin wrote:
 On Mon, Sep 17, 2007 at 12:35:51PM -0700, Gary Kline wrote:
  On Mon, Sep 17, 2007 at 06:46:20PM +0400, Andrew Pantyukhin wrote:
   On Sun, Sep 16, 2007 at 09:27:03PM -0700, Gary Kline wrote:

This may be a bit off the wall, but does anybody have a tool to
take my dozens of mutt  aliases and turn them into an evolution
-style database format?  (if not, is there any universal
address-book app that I could use?)
   
   A sed one-liner could probably solve the problem, but try
   mail/abook - it's a nice converter.
  
  Can you help me with the exact syntax?  As a test, I tried:
   abook --convert --informat mutt  --infile
   /home/kline/.mutt/muttrc --outformat abook --outfile abook
 
 I think you should put your aliases in a separate file and use
 that as an infile.


Easily done, thanks.

 
  An emtpy file ~/.abook/addressbook.new was created.  ((I still
  stand by what I'd said for years, that a few examples are worth
  10K words.))
  
  Re a sed line to get this stuff into ~/.evolution/*, maybe.
  This may be where another very simple perl script would serve
  btter.  Further clues very welcome.
 
 Google says something about evo being able to import ldif files.
 Abook can convert mutt's aliases into ldif.


I'll google for it; thanks for the tip.

 
 P.S. Must you really insert a tab before each line in your
 messages? It certainly doesn't make them look pretty.


Failing eyesight.  The whitespace helps me far more than
the greater-than's.
-- 
  Gary Kline  [EMAIL PROTECTED]   www.thought.org  Public Service Unix
  http://jottings.thought.org   http://transfinite.thought.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is there any way of turning muttrc list into an evolution or other mail alias database?

2007-09-17 Thread Andrew Pantyukhin
On Mon, Sep 17, 2007 at 04:31:53PM -0700, Gary Kline wrote:
 On Tue, Sep 18, 2007 at 01:24:33AM +0400, Andrew Pantyukhin wrote:
  P.S. Must you really insert a tab before each line in your
  messages? It certainly doesn't make them look pretty.
 
 Failing eyesight.  The whitespace helps me far more than the
 greater-than's.

Myself being quite short-sighted (with the usual side-effects
preventing comfortable reading off-screen) I have recently moved
to a single URxvt window taking up my whole desktop. In it, I
manage everything using GNU screen (and a variety of other tools
and hacks). 18pt freetyped font is really easier to read,
especially for someone spending 12h+ a day at his/her laptop.

Anyway, good luck to you!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: linux-firefox dies after xorg update

2007-09-17 Thread Norberto Meijome
On Mon, 17 Sep 2007 17:08:12 +
beni [EMAIL PROTECTED] wrote:

 It is basicaly for the plugins, yes. Flash, mplayer,...

all working fine here with native...

_
{Beto|Norberto|Numard} Meijome

I've had a perfectly wonderful evening. But, this wasn't it.
  Groucho Marx

I speak for myself, not my employer. Contents may be hot. Slippery when wet. 
Reading disclaimers makes you go blind. Writing them is worse. You have been 
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Building a new workstation - dual or quad-core CPU for FreeBSD 7?

2007-09-17 Thread Karol Kwiatkowski
Wojciech Puchar wrote:
 Yes, 4BSD is still the default, although you definitely want to use
 ULE for performance reasons (NB: only on 7, dont use ULE on 6).  I
 don't know whether the release engineers plan to change that default,
 but I will check.
 
 could you point to some URL/explain what's the actual difference.

You may want to check Jeff Roberson's blog site. Kris posted some graphs
on his site, too. Since it's about CURRENT, some results might be
outdated already.

Regards,

Karol.

-- 
Karol Kwiatkowski   karol.kwiat at gmail dot com
OpenPGP 0x06E09309



signature.asc
Description: OpenPGP digital signature


Re: SMTP Error from my server?

2007-09-17 Thread Eric Crist

On Sep 17, 2007, at 5:40 PMSep 17, 2007, Chris Maness wrote:

I have not seen this error before.  What does it mean?  (I will  
change the actual e-mail to protect the address from spam bots).


To: [EMAIL PROTECTED]

From: Mail Administrator Postmaster@PostmasterDomain
Subject: Mail System Error - Returned Mail
Date: Mon, 17 Sep 2007 14:48:17 -0400
This Message was undeliverable due to the following reason:
Your message was not delivered because the return address was  
refused.

The return address was [EMAIL PROTECTED]
Please reply to Postmaster@PostmasterDomain
if you feel this message to be in error.


Chris Maness
Sys Admin


Read the message... I'm guessing that [EMAIL PROTECTED] added NOSPAM  
to the beginning of the address to prevent SPAM from mailing list  
aggregators, et al.


Remove NOSPAM from [EMAIL PROTECTED] and I'm sure you'll be fine.

Also note that this is an error on the other end, nothing wrong with  
your server.



-

Eric F Crist
Secure Computing Networks


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: flash plugin after xorg update

2007-09-17 Thread Norberto Meijome
On Mon, 17 Sep 2007 09:48:33 +0200
Zbigniew Komarnicki [EMAIL PROTECTED] wrote:

 On Monday 17 of September 2007 04:52:06 Norberto Meijome wrote:
  *(my symptoms were a bit different though, it would just time out when
  calling flash... so each flash object in a page would take 40 seconds or
  sosllooo brooowwwsssiiinnn :-) )  
 
 This same behavior I have.

Hi Zbigniew - did u try re-running nspluginwrapper -i {flash's .so} as root ?

_
{Beto|Norberto|Numard} Meijome

All that is necessary for the triumph of evil is that good men do nothing.
  Edmund Burke

I speak for myself, not my employer. Contents may be hot. Slippery when wet. 
Reading disclaimers makes you go blind. Writing them is worse. You have been 
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SMTP Error from my server?

2007-09-17 Thread Chris Maness

Chris Maness wrote:

Jay Chandler wrote:

Chris Maness wrote:
I have not seen this error before.  What does it mean?  (I will 
change the actual e-mail to protect the address from spam bots).


To: [EMAIL PROTECTED]

From: Mail Administrator Postmaster@PostmasterDomain
Subject: Mail System Error - Returned Mail
Date: Mon, 17 Sep 2007 14:48:17 -0400

This Message was undeliverable due to the following reason:

Your message was not delivered because the return address was refused.

The return address was [EMAIL PROTECTED]

Please reply to Postmaster@PostmasterDomain
if you feel this message to be in error.


Chris Maness
Sys Admin


Looks to me like a failed sender verification callout-- these are 
generally construed to be abusive.  I can't easily tell from your 
munging whether it's your server or Adelphia that's doing it, though.


This is the only e-mail address that I am having this problem with, 
and it has been going on for a year or so now.  What other info would 
you guys need to tell what it is.  I guess I don't understand the 
whole sender verification callout  I'll have to do a little google 
to find out.


Thanks,
Chris Maness
Sys Admin for a couple of tiny domains.

p.s.  I read up on this and I believe this would be a problem on the 
sender side.  Is the something like an access file that I can change to 
just allow this particular sender without the check?


Chris Maness
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: flash plugin after xorg update

2007-09-17 Thread Norberto Meijome
On Mon, 17 Sep 2007 10:15:16 -0400
Tsu-Fan Cheng [EMAIL PROTECTED] wrote:

 This flash issue has made me reconsider buying a low-end laptop running
 vista, so I dont have the urgency to deal with this issue. 

low end and vista in the same sentence makes me think your laptop has 4 
cores... ;)

 One thing I need
 flash to work is that I watch mlbtv, and it requires flash plugin to
 initiate. Also for some other multimedia on the internet, having flash
 working just makes it so much easier... uhn

why not just run a small QEMU machine with windows inside? 4 GB is all you need 
for XP (well, probably lessmine has eclipse +java + other stuff in it). 

i dont actually use it for flash, as it works fine for me on bsd...

_
{Beto|Norberto|Numard} Meijome

Q. How do you make God laugh?
A. Tell him your plans.

I speak for myself, not my employer. Contents may be hot. Slippery when wet. 
Reading disclaimers makes you go blind. Writing them is worse. You have been 
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: What about NAT graphical tools?

2007-09-17 Thread Norberto Meijome
On Sun, 16 Sep 2007 15:53:19 -0400
Administrador Nodo CITMATEL Las Tunas [EMAIL PROTECTED] wrote:

 Is there any ported application capable to allow the user to configure a NAT
 (Network Address Translation) service in a graphical interface way?

i think webmin supports ipfw configuration, maybe pf or ipf too...i dont know 
whether it will be userfriendly enough for your needs

saludos desde Sydney,
Beto

_
{Beto|Norberto|Numard} Meijome

The whole problem with the world is that fools and fanatics are always so 
certain of themselves, but wiser people so full of doubts.
   Bertrand Russell

I speak for myself, not my employer. Contents may be hot. Slippery when wet. 
Reading disclaimers makes you go blind. Writing them is worse. You have been 
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SMTP Error from my server?

2007-09-17 Thread Chuck Swiger

On Sep 17, 2007, at 4:05 PM, Chris Maness wrote:
Looks to me like a failed sender verification callout-- these are  
generally construed to be abusive.  I can't easily tell from your  
munging whether it's your server or Adelphia that's doing it, though.


This is the only e-mail address that I am having this problem with,  
and it has been going on for a year or so now.  What other info  
would you guys need to tell what it is.  I guess I don't understand  
the whole sender verification callout  I'll have to do a little  
google to find out.


The idea is pretty simple: when someone sends you an email, you delay  
accepting it until you can confirm that you can send a reply back to  
the sending address, or more precisely, check whether you can do a  
MAIL FROM: your domain and RCPT TO: the sender, and have it return  
OK, without actually going into the DATA phase and delivering a test  
message.


This idea works fine for normal email addresses, but fails miserably  
with certain types of automated email which is not intended for  
people to reply to, and it also tends to lose out with TDMA (http:// 
tmda.net/).  More importantly, it also fails to work with itself--  
other people using sender verification callouts cause a loop of  
failed deliveries, as neither side trusts the other.


--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SMTP Error from my server?

2007-09-17 Thread Chris Maness

Eric Crist wrote:

On Sep 17, 2007, at 5:40 PMSep 17, 2007, Chris Maness wrote:

I have not seen this error before.  What does it mean?  (I will 
change the actual e-mail to protect the address from spam bots).


To: [EMAIL PROTECTED]

From: Mail Administrator Postmaster@PostmasterDomain
Subject: Mail System Error - Returned Mail
Date: Mon, 17 Sep 2007 14:48:17 -0400
This Message was undeliverable due to the following reason:
Your message was not delivered because the return address was refused.
The return address was [EMAIL PROTECTED]
Please reply to Postmaster@PostmasterDomain
if you feel this message to be in error.


Chris Maness
Sys Admin


Read the message... I'm guessing that [EMAIL PROTECTED] added NOSPAM to 
the beginning of the address to prevent SPAM from mailing list 
aggregators, et al.


Remove NOSPAM from [EMAIL PROTECTED] and I'm sure you'll be fine.

Also note that this is an error on the other end, nothing wrong with 
your server.



-

Eric F Crist
Secure Computing Networks


No, please read my message carefully.  I changed it because I know this 
list gets harvested by spam bots because it is bridged to the usenet 
(Eric Crist wrote:

On Sep 17, 2007, at 5:40 PMSep 17, 2007, Chris Maness wrote:

I have not seen this error before.  What does it mean?  (I will 
change the actual e-mail to protect the address from spam bots).


To: [EMAIL PROTECTED]

From: Mail Administrator Postmaster@PostmasterDomain
Subject: Mail System Error - Returned Mail
Date: Mon, 17 Sep 2007 14:48:17 -0400
This Message was undeliverable due to the following reason:
Your message was not delivered because the return address was refused.
The return address was [EMAIL PROTECTED]
Please reply to Postmaster@PostmasterDomain
if you feel this message to be in error.


Chris Maness
Sys Admin


Read the message... I'm guessing that [EMAIL PROTECTED] added NOSPAM to 
the beginning of the address to prevent SPAM from mailing list 
aggregators, et al.


Remove NOSPAM from [EMAIL PROTECTED] and I'm sure you'll be fine.

Also note that this is an error on the other end, nothing wrong with 
your server.



-

Eric F Crist
Secure Computing Networks


No, please read my message carefully.  I changed it for this post 
because I know this list gets harvested by spam bots because it is 
bridged to the usenet (list.freebsd.questions).  I did not want my 
client's e-mail to be picked up by spam bots.  The actual e-mail in this 
header is a valid e-mail.


Chris Maness
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SMTP Error from my server?

2007-09-17 Thread Chris Maness

Chuck Swiger wrote:

On Sep 17, 2007, at 4:05 PM, Chris Maness wrote:
Looks to me like a failed sender verification callout-- these are 
generally construed to be abusive.  I can't easily tell from your 
munging whether it's your server or Adelphia that's doing it, though.


This is the only e-mail address that I am having this problem with, 
and it has been going on for a year or so now.  What other info would 
you guys need to tell what it is.  I guess I don't understand the 
whole sender verification callout  I'll have to do a little google 
to find out.


The idea is pretty simple: when someone sends you an email, you delay 
accepting it until you can confirm that you can send a reply back to 
the sending address, or more precisely, check whether you can do a 
MAIL FROM: your domain and RCPT TO: the sender, and have it return OK, 
without actually going into the DATA phase and delivering a test message.


This idea works fine for normal email addresses, but fails miserably 
with certain types of automated email which is not intended for people 
to reply to, and it also tends to lose out with TDMA 
(http://tmda.net/).  More importantly, it also fails to work with 
itself-- other people using sender verification callouts cause a 
loop of failed deliveries, as neither side trusts the other.


---Chuck


Can I turn it off for this sender?

Chris Maness
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mixer levels on boot

2007-09-17 Thread Norberto Meijome
On Mon, 17 Sep 2007 16:22:03 -0300
Harry Doyle [EMAIL PROTECTED] wrote:

 hello everyone,
 i am running a freebsd server to stream my local campus station's radio
 broadcast to the net. i am using the stock ac97 audio, and using a little
 script in /usr/local/etc/rc.d which uses kldload to load the driver.

it'd be better to simply add to /boot/loader.conf.local (or loader.conf , i
prefer to have it clearly defined)
{DRIVER}_load=YES

eg, for my Intel HDA i have
snd_hda_load=YES

 
 i have to issue mixer rec -83 to get the audio down to a decent level (very
 hot coming out of the mixer but i can't change that for other reasons). i
 have tried to script this mixer command into startup by putting a  sleep
 command and then the mixer command, and also by using the /boot/boot.hints
 file.
 
 however whenever i reboot the machine the mixer command always shows the
 default level of 90 which clips pretty hard.

either
1)  have a script that sets your levels . mine is saved by the OS,, but
sometimes i need to do it by hand, so i use this script:

[EMAIL PROTECTED] [Tue Sep 18 10:23:27 2007]
/usr/home/betom
$ cat bin/set_mixer.sh
#!/bin/sh
## Feedback fixed!!! mic == 0
mixer vol 86:86 pcm 86:86 speaker 49:49 mic 0:0 cd 40:40 rec 100:100 =rec mic
--

of course, your device may be different, so adjust accordingly.

2) to save the values, check /etc/rc.d/mixer. mixer_save is called on stop, so
 a) set your levels
 b) add to /etc/rc.conf  
mixer_enable=YES  # Run the sound mixer.

 c) run /etc/rc.d/mixer stop
 d) reboot  + verify they are set to the right thing. In theory, they should be
saved everytime to reboot..

( i just realised i dont actually have that line in rc.conf...but my levels are
kept across reboots..so all is good... :)

 
 also, the sound driver doesn't seem to load until around 2 minutes after i
 can log into a fresh boot (not a problem, just some extra info). how can i
 script my default rec level on boot?

use /boot/loader.conf.local

_
{Beto|Norberto|Numard} Meijome

The freethinking of one age is the common sense of the next.
   Matthew Arnold

I speak for myself, not my employer. Contents may be hot. Slippery when wet.
Reading disclaimers makes you go blind. Writing them is worse. You have been
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


pysol broken

2007-09-17 Thread David Benfell
Hello all,

Somewhere along the way, with port upgrades, I managed to
break pysol:

earth% pysol 
[1] 74521
earth% Traceback (most recent call last):
  File /usr/local/share/pysol/src/pysol.py, line 47, in module
from main import main
  File /usr/local/share/pysol/src/main.py, line 48, in module
from app import Application
  File /usr/local/share/pysol/src/app.py, line 54, in module
from images import Images, SubsampledImages
  File /usr/local/share/pysol/src/images.py, line 47, in module
from pysoltk import tkversion, loadImage, copyImage, createImage
  File /usr/local/share/pysol/src/pysoltk.py, line 81, in module
exec from  + m +  import *
  File string, line 1, in module
  File /usr/local/share/pysol/src/tk/soundoptionsdialog.py, line 44, in 
module
from pysolaudio import pysolsoundserver
  File /usr/local/share/pysol/src/pysolaudio.py, line 44, in module
import pysolsoundserver
ImportError: No module named pysolsoundserver

[1]  + exit 1 pysol
earth% locate pysolsoundserver
/usr/local/lib/python2.4/site-packages/pysolsoundserver.so
earth% python --version
Python 2.5.1
earth% ls -al /var/db/pkg | grep py 
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 jabber-pyicq-transport-0.8a
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py24-cairo-1.4.0_1
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py24-gtk-2.10.4_1
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-MySQLdb-1.2.2
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-gobject-2.12.3
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-imaging-1.1.6_2
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-libxml2-2.6.30
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-metar-0.12
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-numeric-24.2
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-openssl-0.6
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-setuptools-0.6c7
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-tkinter-2.5.1_2
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-twistedCore-2.5.0_2
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-twistedWeb-0.7.0
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-twistedWords-0.5.0
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-xml-0.8.4
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 py25-zopeInterface-3.3.0.1
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 pyWeather-0.1b
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 pyching-1.2.1_1
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 pysol-4.82_1
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 pysol-sound-server-3.01_2
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 python-2.5,2
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 python24-2.4.4_1
drwxr-xr-x 2 root  wheel   512 Sep 17 12:41 python25-2.5.1
drwxr-xr-x 2 root  wheel   512 Sep 17 12:42 xdpyinfo-1.0.2

What am I needing to fix, and how do I fix it?

Thanks!

-- 
David Benfell, LCP
[EMAIL PROTECTED]
---
Resume available at http://www.parts-unknown.org/
NOTE: I sign all messages with GnuPG (0DD1D1E3).


pgpFG0Mk9DZLI.pgp
Description: PGP signature


Re: SMTP Error from my server?

2007-09-17 Thread Chuck Swiger

On Sep 17, 2007, at 5:25 PM, Chris Maness wrote:

Can I turn it off for this sender?


Presumably they or you can whitelist whichever address is being  
blocked, yes.


I don't know which side is actually refusing the email as you've  
removed too much of the logging context to avoid revealing the  
client's email addy-- which isn't a bad reason, mind you, but it  
means we can't test it ourselves, so you'll have to fill in the  
details


--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SMTP Error from my server?

2007-09-17 Thread Jay Chandler

Chuck Swiger wrote:


The idea is pretty simple: when someone sends you an email, you delay 
accepting it until you can confirm that you can send a reply back to 
the sending address, or more precisely, check whether you can do a 
MAIL FROM: your domain and RCPT TO: the sender, and have it return OK, 
without actually going into the DATA phase and delivering a test message.


This idea works fine for normal email addresses, but fails miserably 
with certain types of automated email which is not intended for people 
to reply to, and it also tends to lose out with TDMA 
(http://tmda.net/).  More importantly, it also fails to work with 
itself-- other people using sender verification callouts cause a 
loop of failed deliveries, as neither side trusts the other.



The larger problem as well is that it doesn't scale.  Someone forging a
From header out of a botnet could easily DDoS a smaller server
completely off the net if enough people implemented this system.

Antispam measures that are in and of themselves abusive aren't generally
considered to be good ideas.

--
Jay Chandler / KB1JWQ
Living Legend / Systems Exorcist
Today's Excuse: SCSI Chain overterminated


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Building a new workstation - dual or quad-core CPU for FreeBSD 7?

2007-09-17 Thread Kris Kennaway

Philip M. Gollucci wrote:

Kris Kennaway wrote:

Josh Carroll wrote:

That's good to know.  You should be using libthr for threaded
performance though :)  That benchmark is probably almost all userland
though, so performance may not suffer much from libpthread.

Oh I wasn't sure if libthr was the preferred thread library for 6.2
also (I'd heard that was the case for -CURRENT).

I should look into whether ffmpeg can be built with libthr instead and
compare performance. Somewhat off topic, so I'll leave it at that, but
thanks again for the great info. I'm really looking forward to
7.0-RELEASE, obviously :)

Yeah, it is preferred on 6.x too (libkse has truly atrocious
performance).  It's trivial to change it over, just add an entry to
/etc/libmap.conf:

Really?  I didn't you you were supposed to switch until 7.0 -- were the
libthr chnages MFC'd and I missed it ?


libthr has been around (and performing better than libkse) since the 5.x 
days and has been recommended for use since 6.0.



I've read
http://people.freebsd.org/~kris/scaling/mysql.html
and
http://wiki.freebsd.org/MySQL

I've been following the discussions on this pretty closely on lists.

PU: Intel(R) Xeon(R) CPU   E5310  @ 1.60GHz (1597.53-MHz
K8-class CPU)
  Origin = GenuineIntel  Id = 0x6f7  Stepping = 7

Features=0xbfebfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE

Features2=0x4e33dSSE3,RSVD2,MON,DS_CPL,VMX,TM2,b9,CX16,b14,b15,b18
  AMD Features=0x20100800SYSCALL,NX,LM
  AMD Features2=0x1LAHF
  Cores per package: 4
real memory  = 9395240960 (8960 MB)
avail memory = 8291323904 (7907 MB)
FreeBSD/SMP: Multiprocessor System Detected: 8 CPUs

uname -a
FreeBSD hobbes.dca2.prod.rws 6.2-RELEASE FreeBSD 6.2-RELEASE #0:
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/SMP  amd64

I'll recompile the kernel eventually to slim it down.

using 4BSD scheduler since its 6.2

ls -1d /var/db/pkg/mysql*
mysql-client-5.0.45
mysql-scripts-5.0.45
mysql-server-5.0.45

ldd /usr/local/libexec/mysqld
mysqld:
libz.so.3 = /lib/libz.so.3 (0x800a5c000)
libwrap.so.4 = /usr/lib/libwrap.so.4 (0x800b7)
libcrypt.so.3 = /lib/libcrypt.so.3 (0x800c79000)
libstdc++.so.5 = /usr/lib/libstdc++.so.5 (0x800d92000)
libm.so.4 = /lib/libm.so.4 (0x800f89000)
libpthread.so.2 = /lib/libpthread.so.2 (0x8010a5000)
libc.so.6 = /lib/libc.so.6 (0x8011d)


sysctl kern.timecounter.choice
   kern.timecounter.choice: TSC(-100) ACPI-fast(1000) i8254(0)
dummy(-100)

sysctl kern.timecounter.hardware
kern.timecounter.hardware: TSC

Disks are:
1) RAID1(2 disks) OS array with mysql logs, replication logs,
and innodb logs.
2) RAID1+0(6disks) innodb mysql data.
3) /tmp is a md0 malloc backed device


Should be swap backed, but it won't make much difference on your workload.


(I'm thinking of using tmpfs in 7.0 when I switch)


tmpfs is not yet production-ready even though it performs better.


using libmap.conf to use libc_r, libpthread, and libthr were all about
equal actually for insert heavy operations.

my.cnf
innodb_thread_concurrency = 8


You want '0' or performance will suck.  There's a basic architectural 
flaw in how mysql handles non-zero concurrency values here (innodb 
accesses are serialized by a global mutex that protects a counter to 
check if it should try to allow more innodb concurrency.  Duh.)


Anyway, assuming your disks can keep up you should see a big performance 
boost when you switch to 7.0.  This is a fairly big if though: I don't 
know if it's even feasible for a write-heavy database to saturate 8 CPUs 
instead of being bottlenecked by disk speeds and leaving the CPUs mostly 
idle.


Kris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Bash mailing list? 

2007-09-17 Thread Giorgos Keramidas
On 2007-09-17 15:56, bsd [EMAIL PROTECTED] wrote:
 Hello,

 I would like to know if anyone of you knows a good maling list about bash
 programing (beginners).

If you have particular questions about using bash(1) on FreeBSD, then
this list is fine.  If you are more interested in bash(1) internals, or
tutorials for the shell itself, I would suggest browsing the
http://www.gnu.org/software/ pages for the manual of the shell itself.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Building a new workstation - dual or quad-core CPU for FreeBSD 7?

2007-09-17 Thread Kris Kennaway

Karol Kwiatkowski wrote:

Wojciech Puchar wrote:

Yes, 4BSD is still the default, although you definitely want to use
ULE for performance reasons (NB: only on 7, dont use ULE on 6).  I
don't know whether the release engineers plan to change that default,
but I will check.

could you point to some URL/explain what's the actual difference.


You may want to check Jeff Roberson's blog site. Kris posted some graphs
on his site, too. Since it's about CURRENT, some results might be
outdated already.


Unfortunately my graphs are offline (the machine that was hosting them 
is being shipped trans-atlantically).  There is still a pdf in 
www.freebsd.org/~kris/scaling though.  It is slightly out of date: 
thesedays peak mysql performance is about 10-15% higher, with no scaling 
bottlenecks in the kernel on 8 CPUs (i.e. mysql itself is the only thing 
unable to scale to high loads due to bottlenecks and contention in the 
mysql userland code).  postgresql performance is about 20-25% higher too 
(and 50-60% better performance than mysql).  Some of these improvements 
come from work that will not be committed until after the 7.0 branch though.


Kris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


PR/51920: Please add Norwegian Collate support to FreeBSD

2007-09-17 Thread Sten Daniel Soersdal


Today i found a very old but very useful PR which gave my FreeBSD 
servers the ability to properly sort strings containing characters in 
the norwegian alphabet. The default (la_LN.ISO8859-1/15) sorts by ASCII 
value which is not quite right.


http://www.freebsd.org/cgi/query-pr.cgi?pr=conf/51920

I had to manually update the Makefile but the .src files where copied as 
is. I haven't found anything wrong with them, but I'll be happy to 
supply an update if anyone does.


Please take a look at this old issue and put this PR to rest.

--
Sten Daniel Soersdal
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Unable to delete a package

2007-09-17 Thread lawrence.petrykanyn

Hi, Peter:


 ===  Installing for libgda3-1.9.102_3
 ===  libgda3-1.9.102_3 conflicts with installed package(s):
  libgda2-1.2.4_1,1
  They install files into the same place.
  Please remove them first with pkg_delete(1).

As people have noted you can use -f to force deletion. The problem you
are experiencing would typically happen either because you are trying
to install some top-level packages that are truly in conflict, in the
sense that they depend on conflicting versions of libgda.

Alternatively, you have older versions of various packages installed
that depend on the older version of libgda3, and are now trying to
install the gnome stuff from a newer ports tree. In this case you may
want to perform a full upgrade (using
portupgrade/portmanagaer/portmaster/etc).


I'm using the command 'portsnap fetch update' each time before I do a 'make 
install clean' hoping that will cover me. I used portupgrade with 5.4 but 
switched to portsnap with 6.2 because I believed from the Handbook that it 
was a 'new and improved' way of maintaining my ports tree. Is this correct?  
Does portsnap do a better job than portupgrade or portsmanager?  Do they all 
do the same thing (...in real life as well as on paper...)?  Does portsnap 
automatically upgrade my programs or just the ports tree?  And if I am using 
portsnap, can I use portupgrade or portsmanager as well, or will they cause 
a conflict?




forcibly deleting the package will work, but the other packages
depending on them will very likely break.


I was concerned that something like that might happen but wasn't sure. 
Thanks!




 (As an aside, is it okay to run these installations from a terminal 
window

 from inside the Gnome GUI environment, or should I be outside of Gnome
 altogether when I do program installations/upgrades?)

It doesn't matter, except in so far as any actions would kill your
running terminal. I would suspect that the already running terminal
would survive (certainly this is the case with most), though I don't
know if the gnome terminal is doing stuff even after initial start-up
that might cause it to die.

(To be strict of course it's always safest to not run stuff you are
actively upgrading, while upgrading. In practice though it tends to
work.)


I prefer to do upgrades and installations from outside the GUI.  But I've 
added 'gdm_enable=Yes' to my rc.conf file so that the graphical login screen 
appears for most daily use.  In order to get to the pre-GUI terminal as 
root, I have to log in as root into the GUI, comment out 'gdm_enable=Yes' in 
my rc.conf file, then reboot the machine so that I can run portsnap (or 
whatever) in the pre-GUI terminal.  Then after running portupgrade, I have 
to re-edit my rc.conf in order to re-enable gdm and reboot again.  Is there 
an easier way to get the pre-GUI terminal without having to reboot after 
commenting out 'gdm_enable=Yes' in my rc.conf file and then re-inserting it 
after I do an upgrade?  I've tried Alt-Ctl-Backspace, and that does kill 
Gnome, but then it just bounces me back into the graphical login screen.


Much appreciated,
Larry


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to add rule with pfctl...

2007-09-17 Thread Agus
Agus wrote:

 2007/9/15, Mel [EMAIL PROTECTED] [EMAIL PROTECTED]:

  On Saturday 15 September 2007 23:18:17 Agus wrote:

  I am trying to figure out how to add a firewall rule with pfctl...
 This is what i'm trying to do...

 I've got SEC that matches certain pattern and takes the IP from that and
 want to trigger a firewall rule to block that IP
 Then after a couple of hours SEC will trigger the command to un-block

  the

  IP...
 So what i need is the command to block an IP address from command line,

  not

  touching any pf.conf

  If you don't need to add a rule but an IP, then tables are your friend.
 Example for /etc/pf.conf:
 # Placeholder for spammers table, non-routable network IP.
 table spammers persist { 192.168.111.111 }
 # Block this traffic
 block return-rst in log on $ext_if proto tcp from spammers port smtp

 Then on the command line:
 /sbin/pfctl -t spammers -Tadd ip.from.new.spammer
 And to delete:
 /sbin/pfctl -t spammers -Tdel ip.from.old.spammer

 --
 Mel
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

  Hi,
 I put this on /etc/pf.conf
 external_addr=192.168.1.11 which is the address of the only interface.
 This machine isn't a router.

 block drop in quick on $ext_if inet proto tcp from 192.168.0.1 to
 $external_addr port ssh

 but when i try to connect from 192.168.0.1 i connect with no problems...this
 rule is to block access..
 What am i doing wrong..is my first time with pf...

 Thankss...
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED] [EMAIL PROTECTED]

  2007/9/17, Goltsios Theodore [EMAIL PROTECTED]:
Well I think that you mean to add this:

ext_if=rl0 # Or whatever your interface is ifconfig helps to find out
block drop in quick on $ext_if inet proto tcp from 192.168.0.1 to $ext_if
port ssh

or even:
ext_if=rl0
external_addr=192.168.1.11
block drop in quick on $ext_if inet proto tcp from 192.168.0.1 to
$external_addr port ssh

Think of macros as variables. As long as you don't define them they don't
exist (are empty).



I knowTheodore, i've done it exactly like u put itfirst declare macros
and then the rule
but i couldn't block access to the machinethis rule is supposed to block
all access to port 22 on the machine coming from 192.168.0.1but I can
access from there...

i checked pfctl -e
pfctl -sa

and everything seems to be loaded...

Thanks...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SMTP Error from my server?

2007-09-17 Thread Chris Maness

Jay Chandler wrote:

Chris Maness wrote:

Chris Maness wrote:

Jay Chandler wrote:

Chris Maness wrote:
I have not seen this error before.  What does it mean?  (I will 
change the actual e-mail to protect the address from spam bots).


To: [EMAIL PROTECTED]

From: Mail Administrator Postmaster@PostmasterDomain
Subject: Mail System Error - Returned Mail
Date: Mon, 17 Sep 2007 14:48:17 -0400

This Message was undeliverable due to the following reason:

Your message was not delivered because the return address was 
refused.


The return address was [EMAIL PROTECTED]

Please reply to Postmaster@PostmasterDomain
if you feel this message to be in error.


Chris Maness
Sys Admin


Looks to me like a failed sender verification callout-- these are 
generally construed to be abusive.  I can't easily tell from your 
munging whether it's your server or Adelphia that's doing it, though.


This is the only e-mail address that I am having this problem with, 
and it has been going on for a year or so now.  What other info 
would you guys need to tell what it is.  I guess I don't understand 
the whole sender verification callout  I'll have to do a little 
google to find out.


Thanks,
Chris Maness
Sys Admin for a couple of tiny domains.

p.s.  I read up on this and I believe this would be a problem on the 
sender side.  Is the something like an access file that I can change 
to just allow this particular sender without the check?


Chris Maness
Give me a bit of a hand here.  Can you tell me what server the 
original message is being sent from, what server is kicking out that 
message, and which one you control?  I don't need IPs, but call 'em 
Server A and Server B; the way you have it described is rather unclear.


--J


Thanks guys.  I just white listed the sender and I will have the sender 
run a test to see if it works now.


Thanks,
Chris Maness
KQ6UP ;o)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to add rule with pfctl...

2007-09-17 Thread Erik Osterholm
On Mon, Sep 17, 2007 at 11:30:03PM -0300, Agus wrote:
 Agus wrote:
 
  2007/9/15, Mel [EMAIL PROTECTED] [EMAIL PROTECTED]:
 
   On Saturday 15 September 2007 23:18:17 Agus wrote:
 
   I am trying to figure out how to add a firewall rule with pfctl...
  This is what i'm trying to do...
 
  I've got SEC that matches certain pattern and takes the IP from that and
  want to trigger a firewall rule to block that IP
  Then after a couple of hours SEC will trigger the command to un-block
 
   the
 
   IP...
  So what i need is the command to block an IP address from command line,
 
   not
 
   touching any pf.conf
 
   If you don't need to add a rule but an IP, then tables are your friend.
  Example for /etc/pf.conf:
  # Placeholder for spammers table, non-routable network IP.
  table spammers persist { 192.168.111.111 }
  # Block this traffic
  block return-rst in log on $ext_if proto tcp from spammers port smtp
 
  Then on the command line:
  /sbin/pfctl -t spammers -Tadd ip.from.new.spammer
  And to delete:
  /sbin/pfctl -t spammers -Tdel ip.from.old.spammer
 
  --
  Mel
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to [EMAIL PROTECTED]
 
   Hi,
  I put this on /etc/pf.conf
  external_addr=192.168.1.11 which is the address of the only interface.
  This machine isn't a router.
 
  block drop in quick on $ext_if inet proto tcp from 192.168.0.1 to
  $external_addr port ssh
 
  but when i try to connect from 192.168.0.1 i connect with no problems...this
  rule is to block access..
  What am i doing wrong..is my first time with pf...
 
  Thankss...
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to [EMAIL PROTECTED] [EMAIL PROTECTED]
 
   2007/9/17, Goltsios Theodore [EMAIL PROTECTED]:
 Well I think that you mean to add this:
 
 ext_if=rl0 # Or whatever your interface is ifconfig helps to find out
 block drop in quick on $ext_if inet proto tcp from 192.168.0.1 to $ext_if
 port ssh
 
 or even:
 ext_if=rl0
 external_addr=192.168.1.11
 block drop in quick on $ext_if inet proto tcp from 192.168.0.1 to
 $external_addr port ssh
 
 Think of macros as variables. As long as you don't define them they don't
 exist (are empty).
 
 
 
 I knowTheodore, i've done it exactly like u put itfirst declare macros
 and then the rule
 but i couldn't block access to the machinethis rule is supposed to block
 all access to port 22 on the machine coming from 192.168.0.1but I can
 access from there...
 
 i checked pfctl -e
 pfctl -sa
 
 and everything seems to be loaded...
 
 Thanks...

Are you sure that you're trying to block only from a specific host?
The source address shouldn't change, even if you're doing nat.  I
would assume that you'd want an 'any' keyword there, rather than a
specific IP address.

Also, you can add hosts to the table automatically based on number of 
connections over a given period of time:

block quick from blackhole
pass on $ext_if inet proto tcp from any to $myip port 22 flags S/SA keep state 
(max-src-conn-rate 5/30, overload blackhole flush global)

The first rule blocks hosts from the blackhole table.  The second adds
hosts to the blackhole table and kills their state if they connect
more than 5 times in 30 seconds.  This is obviously tunable-- 3/30
would be 3 connections in 30 seconds, and 8/60 would be 8 connections
in 60 seconds.

Erik
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SMTP Error from my server?

2007-09-17 Thread Chris Maness

Yep, white listing fixed the bounce.  Thanks guys.

Chris Maness
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Clarification on updating FreeBSD through csup

2007-09-17 Thread Rakhesh Sasidharan


Daniel Bye wrote:


On Mon, Sep 17, 2007 at 09:24:26PM +0400, Rakhesh Sasidharan wrote:

I understand I can use csup to follow the RELENG_62 branch. After the
sources are downloaded, do I have to follow all the steps outlined in this
(http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html)
handbook document? I can understand building and installing world and
kernel, but would I have to reboot to single user and do the mergemaster
stuff too?


If you follow the complete rebuild instructions, yes. If you follow the
instructions for *patching* the system as given in the relevant security
notifications, then only if those instructions say so. You do subscribe
to security-notifications@, don't you?  ;-)


Err, not yet but I just did after seeing your mail. :)

Now that you mention, yes, I had seen those security notifications and 
they mention what to do by way of patching. Great! That's better.



I *think* I might not have to do mergemaster coz security updates
shouldn't have changes in the /etc files and so there'd be no need for
merging files.


Sometimes, the security fixes involve changes under /etc. The recent
jails error comes to mind, as a case in point.


Thanks for the example.


I'd suggest trying it out on a non-critical system, so as to familiarise
yourself with the procedure. You'll be glad you did.


That's the plan. I wanted to try this method out (a) to familiarize myself 
with it, and (b) I understand if one builds custom kernels then the 
freebsd-update method won't work ... I've csuped the RELENG_62 branch, now 
I'll check out the patches and try applying them.


Thanks for your inputs!

- Rakhesh
http://rakhesh.net/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Good FreeBSD Supported Gigabit Ethernet Card?

2007-09-17 Thread Oliver Hansen



Preston Hagar wrote:

On 9/14/07, Oliver Hansen [EMAIL PROTECTED] wrote:
  

I'm looking to eventually upgrade my home network to all gigabit so I'm
going to start by purchasing a few NICs for some old servers I just
received. I know there are quite a few supported by FreeBSD6 which I found
( http://www.freebsd.org/releases/6.0R/hardware-i386.html#ETHERNET ) but
I'm wondering if there is any real benefit in buying a $40 or $50 NIC
like the Netgear GA311 or just get a $20 NIC like the D-Link DFE-530TX+.
The use will probably be a firewall, proxy, file server, and DVR.
http://www.EagleBit.com/Netgear_GA311_Gigabit_PCI_Card_p/eb-400-00357.htm

--
Oliver Hansen
http://www.oliverhansen.com






As others have stated, Intel's are great.  I would highly recommend
them.  Just as a heads up in case you weren't aware, in your research
and purchase watch out for vendors switching chipsets within card
models.  Linksys is very bad about this.--snip-- Usually, no matter what the 
chipset, Intels seem to
be well supported.  I also had good success with the D-Link DGE-560T
PCI Express card and the DGE-530T PCI card under OpenBSD.

Hope this helps.

Preston

  
Thank you Preston and others. I have ordered 4 Intel PWLA8391GT PRO/1000 
GT PCI NICs*. *The Intels seemed like a natural choice considering their 
support and the fact that I've had no issues with them on other 
platforms. Thanks again for the help.


--
Oliver Hansen
http://www.oliverhansen.com

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Unable to delete a package

2007-09-17 Thread Peter Schuller
 I'm using the command 'portsnap fetch update' each time before I do a 'make 
 install clean' hoping that will cover me. I used portupgrade with 5.4 but 
 switched to portsnap with 6.2 because I believed from the Handbook that it 
 was a 'new and improved' way of maintaining my ports tree. Is this correct? 
  Does portsnap do a better job than portupgrade or portsmanager?  Do they 
 all do the same thing (...in real life as well as on paper...)?  Does 
 portsnap automatically upgrade my programs or just the ports tree?  And if 
 I am using portsnap, can I use portupgrade or portsmanager as well, or will 
 they cause a conflict?

portsnap is the new alternative to cvsup for keeping your ports tree
up to date. It will not keep your installed packages up to date
however. Typically one would use portsnap for the ports tree, and then
some other tool for package upgrades.

The most official and traditional tools seems to be portupgrade
(ports-mgmt/portupgrade). If /usr/ports/UPDATING has special
instructions they tend to be for portupgrade. I have personally found
portmanager to work better (ports-mgmt/portmanager), and have recently
began trying out portmaster (ports-mgmt/portmaster).

The redeeming feature of portmanager is that it attempts to recreate
your package installation in such a state as you would have gotten had
you done a clean 'make install' on a fresh ports tree with no packages
installed, while portupgrade and, as far as I can tell also
portmaster, tries to be smart and update only packages that have
actually changed, and honor dependency information. I have found that
in practice trying to be smart just leads to trouble (someone feel
free to flame me). You may want to try both approaches.

 I prefer to do upgrades and installations from outside the GUI.  But I've 
 added 'gdm_enable=Yes' to my rc.conf file so that the graphical login 
 screen appears for most daily use.  In order to get to the pre-GUI terminal 
 as root, I have to log in as root into the GUI, comment out 
 'gdm_enable=Yes' in my rc.conf file, then reboot the machine so that I can 
 run portsnap (or whatever) in the pre-GUI terminal.  Then after running 
 portupgrade, I have to re-edit my rc.conf in order to re-enable gdm and 
 reboot again.  Is there an easier way to get the pre-GUI terminal without 
 having to reboot after commenting out 'gdm_enable=Yes' in my rc.conf file 
 and then re-inserting it after I do an upgrade?  I've tried 
 Alt-Ctl-Backspace, and that does kill Gnome, but then it just bounces me 
 back into the graphical login screen.

Ctrl-Alt-F1, f2, f3 etc will switch to the respective virtual console
while X is still running. You can then switch back to X (probably at
virtual console 7, 8 or something). If you want gdm to die you have to
actually kill gdm; otherwise it will restart the X server when you
kill the previous instance (thinking you just logged out of your
session).

-- 
/ Peter Schuller

PGP userID: 0xE9758B7D or 'Peter Schuller [EMAIL PROTECTED]'
Key retrieval: Send an E-Mail to [EMAIL PROTECTED]
E-Mail: [EMAIL PROTECTED] Web: http://www.scode.org



pgpHuh90UoABk.pgp
Description: PGP signature